what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

KingScada kxClientDownload.ocx ActiveX Remote Code Execution

Posted Feb 11, 2014

Authored by Andrea Micalizzi, juan vazquez | Site metasploit.com

This Metasploit module abuses the kxClientDownload.ocx ActiveX control distributed with WellingTech KingScada. The ProjectURL property can be abused to download and load arbitrary DLLs from arbitrary locations, leading to arbitrary code execution, because of a dangerous usage of LoadLibrary. Due to the nature of the vulnerability, this module will work only when Protected Mode is not present or not enabled.

tags | exploit, arbitrary, code execution, activex

advisories | CVE-2013-2827

SHA-256 | ad47b03cb77be889b47d699cea4b847b22b73010c94c1218576856423018df63

Download | Favorite | View

Related Files

No related files