2007/05/10

MoAxB #10: RControl.dll v. 1.2.1.0 Denial of Service Exploit

Anche questo controllo è un VNC manager e anche questo è vulnerabile a stack overflow.
Giostrando la lunghezza della stringa si possono controllare di volta in volta diversi registri, quindi non escludo la possibilità di esecuzione di codice arbitrario.

Dimostrazione Online

Formato testo

P.S.
Se si prova con una stringa inferiore a 4000 caratteri si verifica uno strano crash. Sembra un heap overflow nella ntdll.dll ma non ne sono sicuro e non ho tempo di indagare a fondo :)

7 comments:

Anonymous said...

...........................................................

Anonymous said...

And if we are talking specifics, here, then make it a waist 33, length 30 to crease

nicely over my square tipped Kenneth Cole Reaction vintage nubuck loafers. I also would

like a 1.8" wide Gucci horsebit ring buckle belt the same color as the loafers.

............................................................................

Unknown said...

lv handbagslv handbags
louis vuitton handbagslouis vuitton handbags
discount louis vuittondiscount louis vuitton

discount lv bagsdiscount lv bags
discount lv handbagsdiscount lv handbags
discount louis vuitton handbagsdiscount louis vuitton handbags

cheap louis vuittoncheap louis vuitton
cheap lv bagscheap lv bags
cheap lv handbagscheap lv handbags
cheap louis vuitton handbagscheap louis vuitton handbags
louis vuitton salelouis vuitton sale
lv bags salelv bags sale
lv handbags salelv handbags sale
louis vuitton handbags salelouis vuitton handbags sale
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
christian louboutin
christian louboutin boots
Christian Louboutin shoes
Louboutin shoes
我要吃美食网
老猫
老猫博客
老猫的博客
老猫外贸
老猫模板
老猫zencart模板
老猫模板演示Demo zencart

Unknown said...

lv handbagslv handbags
louis vuitton handbagslouis vuitton handbags
discount louis vuittondiscount louis vuitton

discount lv bagsdiscount lv bags
discount lv handbagsdiscount lv handbags
discount louis vuitton handbagsdiscount louis vuitton handbags

cheap louis vuittoncheap louis vuitton
cheap lv bagscheap lv bags
cheap lv handbagscheap lv handbags
cheap louis vuitton handbagscheap louis vuitton handbags
louis vuitton salelouis vuitton sale
lv bags salelv bags sale
lv handbags salelv handbags sale
louis vuitton handbags salelouis vuitton handbags sale
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
christian louboutin
christian louboutin boots
Christian Louboutin shoes
Louboutin shoes
我要吃美食网
老猫
老猫博客
老猫的博客
老猫外贸
老猫模板
老猫zencart模板
老猫模板演示Demo zencart

Unknown said...

cheap louis vuittoncheap louis vuitton
cheap lv bagscheap lv bags
cheap lv handbagscheap lv handbags

cheap louis vuitton handbagscheap louis vuitton handbags
louis vuitton salelouis vuitton sale
lv bags salelv bags sale
lv handbags salelv handbags sale
louis vuitton handbags salelouis vuitton handbags sale

chanel bagschanel bags

cheap chanel bagscheap chanel bags
discount chanel bagsdiscount chanel bags
chanel bags salechanel bags sale






ルイ・ヴィトン(バッグ)
シャネル
グッチ
エルメス
ボッテガ ヴェネタ
クロエ
腕時計・ウオッチ
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
louis vuittonlouis vuitton
lv bagslv bags

Unknown said...

ルイ・ヴィトン(バッグ)
バッグ・ポーチ

財布・小物
リクエスト
腕時計・ウオッチ
アクセサリー

ファッション
パーツ・関連製品
贈り物
ルイヴィトン
ルイヴィトン バッグ
ルイ・ヴィトン(バッグ)
ルイ・ヴィトン
louis vuittonlouis vuitton
lv bagslv bags
lv handbagslv handbags
louis vuitton handbagslouis vuitton handbags
discount louis vuittondiscount louis vuitton
discount lv bagsdiscount lv bags
discount lv handbagsdiscount lv handbags
discount louis vuitton handbagsdiscount louis vuitton handbags

Anonymous said...

Along with the superior uggs classic cardy outlet chronograph, the design ensures complete comfort and durability for its wearer. The bracelet sets it apart from regular watches making it a star performer amongst all the ugg clearance luxurious watches of Rolex. Its precision and beauty have become stuff of legends like Jack Nicklaus’s golfing style. nice and cheap ugg boots “Life”, Edward Norton famously quotes “shouldn’t be avoided, it should be faced”. Who else can deliver a punch line like that but a man who is known for his humility and his perseverance in the eye of a storm?