yeah, it makes us nervous too

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

WebEx UCF atucfobj.dll ActiveX NewObject Method Buffer Overflow

Posted Mar 4, 2010

Authored by Tobias Klein, Elazar Broad, Guido Landi | Site metasploit.com

This Metasploit module exploits a stack-based buffer overflow in WebEx's WebexUCFObject ActiveX Control. If an long string is passed to the 'NewObject' method, a stack- based buffer overflow will occur when copying attacker-supplied data using the sprintf function. It is noteworthy that this vulnerability was discovered and reported by multiple independent researchers.

tags | exploit, overflow, activex

advisories | CVE-2008-3558

MD5 | f2d99a88beab4e4dd35711d91502b078

Download | Favorite | Comments (0)