[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Green Dam 3.17 (URL) Remote Buffer Overflow Exploit (xp/sp2)

Author
seer[N.N.U]
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-9473
Category
remote exploits
Date add
11-06-2009
Platform
windows
============================================================
Green Dam 3.17 (URL) Remote Buffer Overflow Exploit (xp/sp2)
============================================================

Green Dam remote buffer overflow exploit
 
"Green Dam" is a software used for monitoring and anti-pornography, popularizing by
Chinese goverment. After July 1st, it will be forced to install on all new Chinese PCs.
Now it already has 50 million copies in China.
In order to monitor the URL that user is exploring, Green Dam injected the browser
process. When Green Dam is trying to handle a long URL, a stack overflow will occur in the
browser process.
This exploit can be used for exploitation on IE, on those computers installed Green Dam.
I used the .net binary to deploy shellcode, for it`s more stable than Heap Spray, and able
to bypass DEP and ASLR on Vista.
The exploit page contains a .net control, so it should be published on IIS.
                        ---seer[N.N.U]

http://inj3ct0r.com/sploits/9473.zip



#  0day.today [2024-12-25]  #