CVE-2012-0266

Related Files

NTR ActiveX Control Check() Method Buffer Overflow

Posted Sep 22, 2012

Authored by Carsten Eiram, juan vazquez | Site metasploit.com

This Metasploit module exploits a vulnerability found in NTR ActiveX 1.1.8. The vulnerability exists in the Check() method, due to the insecure usage of strcat to build a URL using the bstrParams parameter contents, which leads to code execution under the context of the user visiting a malicious web page. In order to bypass DEP and ASLR on Windows Vista and Windows 7 JRE 6 is needed.

tags | exploit, web, code execution, activex

systems | windows

advisories | CVE-2012-0266, OSVDB-78252

SHA-256 | 71b360ec4aa13486de7017b18411dfb19378317ae8e8699d3895d166df0771b8

Download | Favorite | View

NTR ActiveX Control Four Buffer Overflows

Posted Jan 12, 2012

Authored by Carsten Eiram | Site secunia.com

Secunia Research has discovered four buffer overflows in the NTR ActiveX control, which can be exploited by malicious people to compromise a user's system. NTR ActiveX Control version 1.1.8 is affected.

tags | advisory, overflow, activex

advisories | CVE-2012-0266

SHA-256 | 749b21b3ffb4706107fa23982681c9002436ae13b7acd96089e1d8988fdcb778

Download | Favorite | View