CVE-2012-0267

Related Files

NTR ActiveX Control StopModule() Remote Code Execution

Posted Sep 22, 2012

Authored by Carsten Eiram, juan vazquez | Site metasploit.com

This Metasploit module exploits a vulnerability found in the NTR ActiveX 1.1.8. The vulnerability exists in the StopModule() method, where the lModule parameter is used to dereference memory to get a function pointer, which leads to code execution under the context of the user visiting a malicious web page.

tags | exploit, web, code execution, activex

advisories | CVE-2012-0267, OSVDB-78253

SHA-256 | 6acce73c09ae26c0cdd0799d7b6afb5dff55a6136f9b0ac4216f6537527d0c5c

Download | Favorite | View

NTR ActiveX Control StopModule() Input Validation

Posted Jan 12, 2012

Authored by Carsten Eiram | Site secunia.com

Secunia Research has discovered a vulnerability in NTR ActiveX control, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused by missing input validation in the handling of the "StopModule()" method and can be exploited via a specially crafted "lModule" parameter to reference an expected module structure at an arbitrary memory address. This can be exploited to dereference an arbitrary value in memory as a function pointer. Successful exploitation allows execution of arbitrary code. NTR ActiveX Control version 1.1.8 is affected.

tags | advisory, arbitrary, activex

advisories | CVE-2012-0267

SHA-256 | f4c7913670d60302279ef9cbc25fdd9fd7774592fda24b75eade05cc79505853

Download | Favorite | View