the internet's gray area

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

Oracle Document Capture 10g ActiveX Control Buffer Overflow

Posted Dec 31, 2009

Authored by MC | Site metasploit.com

This Metasploit module exploits a stack overflow in Oracle Document Capture 10g (10.1.3.5.0). Oracle Document Capture 10g comes bundled with a third party ActiveX control emsmtp.dll (6.0.1.0). When passing a overly long string to the method "SubmitToExpress" an attacker may be able to execute arbitrary code.

tags | exploit, overflow, arbitrary, activex

advisories | CVE-2007-4607

MD5 | 90f704e94ac7935091f0e66cc3347471

Download | Favorite | Comments (0)