CVE-2008-7103 – Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)

https://notcve.org/view.php?id=CVE-2008-7103

Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attackers to cause a denial of service (browser crash) or execute arbitrary code via a long Document.Location property value. Desbordamiento de búfer basado en pila en un control ActiveX en najdisitoolbar.dll en Najdi.si Toolbar 2.0.4.1 permite a los atacantes remotos causar una denegación de servicio (caída del navegador) o ejecución arbitraria de código a través de un valor largo de la propiedad Document.Location. • https://www.exploit-db.com/exploits/6327 http://osvdb.org/47909 http://secunia.com/advisories/31671 http://www.securityfocus.com/bid/30922 https://exchange.xforce.ibmcloud.com/vulnerabilities/44840 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •