Quest InTrust AnnotateX ActiveX Exploit

This module exploits a vulnerability in AnnotateX.dll included in the Quest InTrust application. The exploit is triggered when the Add() method is invoked with a crafted object argument. This module runs a web server waiting for vulnerable clients (Internet Explorer) to connect to it. When the client connects, it will try to install an agent by exploiting this vulnerability.
Exploit Platform
Exploit Type
Product Name