Changeset 1528

Timestamp:

01/16/08 15:25:43 (8 months ago)

Author:

jose

Message:

[phoneyc]
support for Qvod Player QvodCtrl? Class ActiveX Control "URL" Property Buffer Overflow
vuln module, exploit demo code

Files:

• phoneyc/trunk/ActiveX.py (modified) (2 diffs)
• phoneyc/trunk/modules/jscript/QvodCtrl.js (added)
• phoneyc/trunk/tests/qvodctl.html (added)

phoneyc/trunk/ActiveX.py

@@ -66 +66 @@
-        self.clsname['IMWeb.IMWebControl.1'] = IMWebControl()
-        self.clsname['awApi4.AnswerWorks.1'] = AnswerWorks()
+        self.clsname['QvodInsert.QvodCtrl.1'] = QvodCtrl()
-
-        # set up the pure JScript version
@@ -334 +335 @@
-        self.description = 'RTS Sentry Digital Surveillance PTZCamPanel Class'
-
+class QvodCtrl(ActiveX):
+    def __init__(self):
+        self.js_src = self.load_js_src('QvodCtrl.js')
+        self.classname = 'QvodCtrl'
+        self.cve_id = ('CVE-NOMATCH', )
+        self.description = 'Qvod Player QvodCtrl Class ActiveX Control'
+