2007/05/03

MoAxB #03: WordViewer.ocx 3.2 multiple methods DoS

This component allows you to visualize, create and modify doc files.
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.

Online demonstration

Text format

This is the content of registers when the crash happens:

EAX 003042D4
ECX 01642A24
EDX 00000000
EBX 0173EA48
ESP 0173EA1C
EBP 0173EC54
ESI 00200169
EDI 03F2002C UNICODE "AAA..."

EIP 77527420 ole32.77527420

77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH

2007/05/02

MoAxB #02: ExcelViewer.ocx 3.1 multiple methods DoS

This component allows you to visualize, create and modify xls files.
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.

Online demonstration

Text version

This is the content of registers when the crash happens:

EAX 003042D4
ECX 01642A34
EDX 00000000
EBX 0173EA58
ESP 0173EA2C
EBP 0173EC64
ESI 00200169
EDI 03C20024 UNICODE "AAA..."

EIP 77527420 ole32.77527420

77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH

2007/05/01

MoAxB #01: PowerPointViewer.ocx 3.1 multiple methods DoS

well, let's start the MoAxB with a DoS. This component allows you to visualize, create and modify ppt files.
Some methods are unable to handle exceptional conditions, and this causes the crash of the application that uses this component.

Online demonstration

Text format

This is the content of registers when the crash happens:

EAX 000EC484
ECX 01642A38
EDX 00000000
EBX 0173EA5C
ESP 0173EA30
EBP 0173EC68
ESI 000F4241
EDI 039E0024 UNICODE "AAA..."

EIP 77527420 ole32.77527420

77527420 8501 TEST DWORD PTR DS:[ECX],EAX <-- CRASH

2007/04/19

Month of ActiveX Bug announced

well, first of all sorry for my poor english then some informations about activex controls from wikipedia.
so I'm here and I'm proud to announce that on 2007 MAY will start the Month of ActiveX Bug (MoAxB).
most of them are simple DoS (don't worry there are also some code execution) but that's because MoAxB has only a sense: to inform developers about the risk of using activex controls.
naturally everyone's invited to post activex bug or to ask for information or simply to post comments.

Greetz to:
my wife and my daughter
for all the love they give to me and for their patience

in alphabetical order :)
auron, GiampaZ, hawake, ppanico2, redeemer, rgod, str0ke, The Wanderer, wicker25 and to all I forgot to mention for their support and friendship.

now be safe brothers, see you on 2007/05/01