2007/05/28

----------------------------------------------------------------------------------------------- EDraw Office Viewer Component (edrawofficeviewer.ocx v. 4.0.5.20) Unsafe Method Vulnerability url: http://www.ocxt.com/officeviewer.php author: shinnai mail: shinnai[at]autistici[dot]org site: http://shinnai.altervista.org This was written for educational purpose. Use it at your own risk. Author will be not be responsible for any damage. THE EXPLOIT WILL DELETE THE system.ini FILE SO BE SURE TO MAKE A COPY OF IT BEFORE RUN THIS EXPLOIT OR YOUR PC WILL NOT RESTART! Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7 all software that use this ocx are vulnerable to this exploits. This ActiveX is marked as: RegKey Safe for Script: True RegKey Safe for Init: True KillBitSet: False -----------------------------------------------------------------------------------------------