/*
--=0-0-000000000--x==-xxxxxxxxx
-
Excel Viewer OCX 3.2
homepage: www.officeocx.com
download: www.brothersoft.com/excel-viewer-ocx-51797.html
- RegKey Safe for Script: True
- RegKey Safe for Init: True
- Implements IObjectSafety: True
- IDisp Safe: Safe for untrusted: caller,data
- IPersist Safe: Safe for untrusted: caller,data
- IPStorage Safe: Safe for untrusted: caller,data
- Tested on Avant Browser 11.7.21 ie 6
Vuln:
1) Arbitrary File Download [HttpDownloadFile]
2) Arbitrary file owerwrite [Save]
--==0-0000000011011110===
Propably it worst apps i ever see
this is funy that It is meant as Safe for scripting
They want sell it l0l
---000----------++++---------------000
Alfons Luja
Pozdrawiam swoich fanóF
9002
:P
00 -0000000000000000===------------------x
*/