CVE-2008-7053

LogMeIn RACtrl.dll - Denial of Service via fgcolor and bgcolor Property Manipulation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-7053. PoCs published by YAG KOHHA.

AI-analyzed exploit summary This is a proof-of-concept exploit for a memory corruption vulnerability in LogMeIn Remote Access Utility ActiveX control (RACtrl.dll). It triggers a DoS by overwriting memory via the 'fgcolor' and 'bgcolor' properties with a large buffer of 'A' characters.

Description

LogMeIn Remote Access Utility ActiveX control (RACtrl.dll) allows remote attackers to cause a denial of service (crash) by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption.

Exploits (1)

exploitdb WORKING POC VERIFIED

by YAG KOHHA · htmldoswindows

https://www.exploit-db.com/exploits/6326

View Code ZIP pw:eip

This is a proof-of-concept exploit for a memory corruption vulnerability in LogMeIn Remote Access Utility ActiveX control (RACtrl.dll). It triggers a DoS by overwriting memory via the 'fgcolor' and 'bgcolor' properties with a large buffer of 'A' characters.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: LogMeIn Remote Access Utility (RACtrl.dll)

No auth needed

Prerequisites: Victim must visit a malicious webpage hosting the exploit · ActiveX control must be enabled in the browser

MITRE ATT&CK