2007/05/07

MoAxB #07: Versalsoft HTTP File Uploader (UFileUploaderD.dll) 'AddFile' method Buffer Overflow

Riporto, in questo exploit, solo il contenuto dei registri visto che credo sia chiaro che l'esecuzione di codice arbitrario è possibile.

Dimostrazione online

Formato txt

11:40:51.172 pid=08E4 tid=0AB0 EXCEPTION (first-chance)
----------------------------------------------------------------
Exception C0000005 (ACCESS_VIOLATION reading [41414141])
----------------------------------------------------------------
EAX=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EBX=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
ECX=41414141: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EDX=7C9137D8: 8B 4C 24 04 F7 41 04 06-00 00 00 B8 01 00 00 00
ESP=0173E26C: BF 37 91 7C 54 E3 73 01-84 F2 73 01 70 E3 73 01
EBP=0173E28C: 3C E3 73 01 8B 37 91 7C-54 E3 73 01 84 F2 73 01
ESI=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EDI=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EIP=41414141: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
--> N/A
----------------------------------------------------------------

6 comments:

Anonymous said...

Do you know [url=http://www.gamekoo.com/product/Rose_Online_zuly.html]Rose zuly[/url]? I like it.
My brother often go to the internet bar to buy [url=http://www.gamekoo.com/product/Rose_Online_zuly.html]rose zulie[/url] and play it.
After school, He likes playing games using these [url=http://www.gamekoo.com/product/Rose_Online_zuly.html]rose online zuly[/url] with his friend.
One day, he give me many [url=http://www.gamekoo.com/product/Rose_Online_zuly.html]rose online zulie[/url] and play the game with me.
I came to the bar and found [url=http://www.gamekoo.com/product/Rose_Online_zuly.html]Arua ROSE zuly[/url] was so cheap. So, I also go to play game with him.

Do you know [url=http://www.gamekoo.com/product/Scions_of_Fate_Gold.html]Scions Of Fate gold[/url] ? I like it.
My brother often go to the internet bar to buy [url=http://www.gamekoo.com/product/Scions_of_Fate_Gold.html]SOF gold[/url] and play it.
After school, He likes playing games using these [url=http://www.gamekoo.com/product/Scions_of_Fate_Gold.html]Scions Of Fate money[/url] with his friend.
One day, he give me many [url=http://www.gamekoo.com/product/Scions_of_Fate_Gold.html]cheap SOF gold[/url] and play the game with me.
I came to the bar and found [url=http://www.gamekoo.com/product/Scions_of_Fate_Gold.html]buy sof gold[/url] was so cheap. So, I also go to play game with him.

Anonymous said...

You know ,I have some kal geons, and my friend also has some
kal gold, do you kouw they have the same meaning, Both of them can be called
kal online geons,I just want to buy some
kal online gold, because there are many
kalonline Geons.
You know ,I have some Tales Of Pirates gold, and my friend also has some Tales Of Pirates money, do you kouw they have the same meaning, I just want to
buy Tales Of Pirates Gold, because there are many
cheap Tales Of Pirates gold

Anonymous said...

Have you heared about a game which you need use kal geons to play, and you can also borrow kal gold from other players? But you can buy kal online geons, or you will lose the choice if you do not have kal online gold. If you get kalonline Geons, you can continue this game.

Anonymous said...

I like to play last chaos, because I like its name, also I like last chaos gold. My friend told me that she would buy lastchaos gold for me, and I was so happy. I do not like to go shopping, because it always spends a lot of money, but I never hesitate to buy last chaos gold. You can buy cheap lastchaos gold; it is so easy and convenient. I believe the future of lastchaos money is bright.

Unknown said...

Watch company replica IWC Schaffhausen celebrates the man known as Saint-Ex with a special edition.
watches replica
replica watches
replica watch
Fake watches
Men’s watcheshes
IWC
replica IWC
IWC replica
replica IWC watch
replica IWC watches
IWC Aquatimer
iwc big pilot
IWC Da Vinci
IWC Vintage collection
IWC Portofino
IWC Portuguese
replica IWC Aquatimer
replica IWC Da Vinci
replica IWC Portofino

Unknown said...

Along with the superior uggs classic cardy outlet chronograph, the design ensures complete comfort and durability for its wearer. The bracelet sets it apart from regular watches making it a star performer amongst all the ugg clearance luxurious watches of Rolex. Its precision and beauty have become stuff of legends like Jack Nicklaus’s golfing style. nice and cheap ugg boots “Life”, Edward Norton famously quotes “shouldn’t be avoided, it should be faced”. Who else can deliver a punch line like that but a man who is known for his humility and his perseverance in the eye of a storm?