Thursday, January 31, 2008

MySpace Uploader Buffer Overflow Exploit

MySpace Uploader Buffer Overflow Exploit

written by e.b.
Tested on Windows XP SP2(fully patched) English, IE6
MySpaceUploader.ocx version 1.0.0.4: {48DD0448-9209-4F81-9F6D-D83562940134}
Aurigma ImageUploader4.ocx version version 4.5.70.0: {6E5E167B-1566-4316-B27F-0DDAB3484CF7}
Thanks to h.d.m. and the Metasploit crew

http://www.milw0rm.com/exploits/5025

-----------------

This control is used by Myspace to allow for quick and easy photo upload. Luckily I have uninstalled this control long ago and continue to use the older photo upload tool (which can be found at the bottom of the photo uploader page).

No comments:

Post a Comment