2007/05/09

MoAxB #09: BarCodeWiz ActiveX Control 2.0 (BarcodeWiz.dll) Remote Buffer Overflow Exploit

Questo controllo consente di creare, visualizzare e stampare codici a barre. Il metodo "verify" di questo controllo è vulnerabile a buffer overflow grazie al quale il registro EIP viene sovrascritto dando la possibilità di eseguire codice arbitrario.

Dimostrazione online

Formato txt

Ecco la situazione dei registri al momento del crash:

14:39:21.000 pid=1244 tid=1534 EXCEPTION (first-chance)
----------------------------------------------------------------
Exception C0000005 (ACCESS_VIOLATION reading [61616239])
----------------------------------------------------------------
EAX=61616161: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EBX=03558474: 41 00 41 00 41 00 41 00-41 00 41 00 41 00 41 00
ECX=01D1E375: 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00
EDX=01D1F020: 41 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41
ESP=01D1F014: 00 00 00 00 1C 0A 57 03-70 1B EB 03 41 41 41 41
EBP=01D1F420: 41 41 41 41 41 41 41 41-61 61 61 61 41 41 41 41
ESI=770F4C3B: 8B FF 55 8B EC 8B 45 08-85 C0 74 05 8B 40 FC D1
EDI=01D1F010: 7C 9E 55 03 00 00 00 00-1C 0A 57 03 70 1B EB 03
EIP=03E9F9C6: 8B 88 D8 00 00 00 52 8B-01 FF 50 0C 85 C0 8B 45
--> MOV ECX,[EAX+000000D8]
----------------------------------------------------------------

14:39:21.000 pid=1244 tid=1534 EXCEPTION (first-chance)
----------------------------------------------------------------
Exception C0000005 (ACCESS_VIOLATION reading [62626262])
----------------------------------------------------------------
EAX=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EBX=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
ECX=62626262: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EDX=7C9137D8: 8B 4C 24 04 F7 41 04 06-00 00 00 B8 01 00 00 00
ESP=01D1EC44: BF 37 91 7C 2C ED D1 01-94 F8 D1 01 48 ED D1 01
EBP=01D1EC64: 14 ED D1 01 8B 37 91 7C-2C ED D1 01 94 F8 D1 01
ESI=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EDI=00000000: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
EIP=62626262: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
--> N/A
----------------------------------------------------------------

15 comments:

Anonymous said...

buy wow gold,cheap wow gold,power wow power levelingworld of warcrft gold.

Anonymous said...

酒店經紀PRETTY GIRL 台北酒店經紀人 ,禮服店 酒店兼差PRETTY GIRL酒店公關 酒店小姐 彩色爆米花酒店兼職,酒店經紀, 酒店上班,酒店工作 PRETTY GIRL酒店喝酒酒店上班 彩色爆米花台北酒店酒店小姐 PRETTY GIRL酒店上班酒店打工PRETTY GIRL酒店打工酒店經紀 彩色爆米花

Anonymous said...

If you are cheap wow gold trying any unknown cheats to earn gold, you would cheapest wow gold face some problem and your account will be black out. So don't try to wow gold find cheats instead try to world of warcraft gold sale follow the guideline of world of warcraft. These tips could Cheap Wow Goldwork as gold cheat and can help a lot to earn gold and money. World of Warcraft is the most exiting online game and while Playing the game most of the players struggle wow power leveling to earn a lot of gold.

Most of the players World Of Warcraft Goldtry search cheat code for this game to earn gold. This wow gold cheaparticle will help Wow Goldyou a lot to earn more and more gold.The best way to earn gold in this online game is by going through the guidelines wow gold for saleand other information about itemchannel.comthe game that are available on the internet .
Wow Gold aoc gold warhammer goldbuy warhammer gold</a

Brendan said...

buy ultima gold
buy ultima gold
buy ultima gold
ultima gold
ultima gold
ultima gold
eq2 platinum
ffxi gil
seo tools
loan modification
warhammer guides
loan modification
wow 80
mmorpg database
hot gamers
daily trivia questions
ffxi gil
loan modification
cooking oil recycling
mmorpg games
ultima gold
mmorpg guides
Age of conan
Warhammer Online
World of Warcraft
Archloard
City of Heroes
loan modification

Anonymous said...

A Japanese Anime Cosplay convention being held for the fourth consecutive year. China wholesale operates a leading China wholesale products business Online that supplies high quality cosplay costumes and other casual wear to distributors and screen printers. In addition to its buy china wholesale stores and China wholesalers operations. Japanese School Uniform becomes common now.

Ebuy4cheaps said...

Replica watch
nice ChronoSwiss replica watches
nice Concord replica watches
nice Corum replica watches
nice D & G replica watches
nice De Witt replica watches
nice Dior replica watches
nice Ebel replica watches
nice Emporio Armani replica watches
nice Fendi replica watches
nice Ferrari replica watches
nice Franck Muller replica watches
nice Girard Perregaux replica watches
nice Glashutte Original replica watches
nice Graham replica watches
nice Gucci replica watches

Anonymous said...

Your blog is wonderful, I like it very much, thank you!
By the way, do you like polo shirts, which are very chic, especially the polo t shirts, I love them very much. I also like playing tennis rackets, it can keep healthy, what do you like to do?
We are the outlet of polo t shirts women, polo t shirts on sale, polo t shirts for women, polo shirts on sale, these products are best-seller in our store online.besides we also sell polo shirts men, men's polo shirt, men polo shirt, mens polo shirts, mens polo shirt and cheap polo shirts, discount polo shirts, men's polo shirts, women's polo shirts We are also the outlet of cheap tennis racket, discount tennis racket, and the main product is prince tennis racquet, head tennis rackets, wilson tennis racket, babolat tennis racquet.You are warmly welcomed to my store online!

Anonymous said...
This comment has been removed by the author.
Anonymous said...

Sign up for our gaming forum, earn 20 free credits.
We are giving away Ultima Online Gold for posts and credits(MMOGold).
Post about your favorite game or buy/sell/trade.
Click Here

We have come a long way on our gaming screenshots, we still need more help, post some today earn credits.
Click Here

Anonymous said...

徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信徵信社徵信

Unknown said...

Watch company replica IWC Schaffhausen celebrates the man known as Saint-Ex with a special edition.
watches replica
replica watches
replica watch
Fake watches
Men’s watcheshes
IWC
replica IWC
IWC replica
replica IWC watch
replica IWC watches
IWC Aquatimer
iwc big pilot
IWC Da Vinci
IWC Vintage collection
IWC Portofino
IWC Portuguese
replica IWC Aquatimer
replica IWC Da Vinci
replica IWC Portofino

Anonymous said...

Finally, an issue that I am passionate about. I have looked for information of this caliber for the last several hours. Your site is greatly appreciated.
Health
4 Slice Toaster
Slice Toaster
About Toaster
Toaster Information

hdtv corner
best hdtv

Anonymous said...

Hello, This page is very helpful and fun to read. I am a huge follower of the things blogged about. I also love reading the comments, but it seems like a great deal of readers need to stay on topic to try and add something to the original topic. I would also encourage all of you to bookmark this page to your most used service to help get the word out. Thanks. hdtv corner

Unknown said...

Along with the superior uggs classic cardy outlet chronograph, the design ensures complete comfort and durability for its wearer. The bracelet sets it apart from regular watches making it a star performer amongst all the ugg clearance luxurious watches of Rolex. Its precision and beauty have become stuff of legends like Jack Nicklaus’s golfing style. nice and cheap ugg boots “Life”, Edward Norton famously quotes “shouldn’t be avoided, it should be faced”. Who else can deliver a punch line like that but a man who is known for his humility and his perseverance in the eye of a storm?

Naijauto said...

https://www.madinamerica.com/forums/users/carforsalenaij/