exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-72135

ICONICS WebHMI ActiveX Buffer Overflow

Posted May 12, 2011

Authored by sinn3r, sgb, bls | Site metasploit.com

This Metasploit module exploits a vulnerability found in ICONICS WebHMI's ActiveX control. By supplying a long string of data to the 'SetActiveXGUID' parameter, GenVersion.dll fails to do any proper bounds checking before this input is copied onto the stack, which causes a buffer overflow, and results arbitrary code execution under the context of the user.

tags | exploit, overflow, arbitrary, code execution, activex

advisories | OSVDB-72135

SHA-256 | 627c824b526df4f9b075cf7631d7fbdbd9747ed69a817b804cc5b007faa0cb03

Download | Favorite | View