|
|
+-----------------------------------------------------------------.
Affected : Realplayer 11 ActiveX on Win Vista and Win XP SP2 :
Type : DOS Attack :
Date : 28-11-2007 :
Author : Adonis, Abed :
Link : http://www.safehack.com/Advisory/realpdos.txt :
+-----------------------------------------------------------------.
:
+-------------. :
Brief History \ :
+---------------`-------------------------------------------------.
GetSourceTransport() fails to handle exceptional conditions, which:
leads to a DoS (Denial of Service) attack. :
:
GetSourceTransport() is found in rmoc3260.dll which is installed :
with RealPlayer 11. :
:
Note: This ActiveX can be loaded by IE or any other browser. :
:
Successful exploitation will lead to a remote crash in IE 6/7. :
:
+-----------. :
The Problem \ :
+-------------`---------------------------------------------------.
RealPlayer 11 ActiveX DoS Proof-of-Concept :
:
:
-:PoC:- :
1- Copy and past the following code into filepoc.wsf :
2- Run it by double clicking on it :
---------------------------------------------------snip-----------: