what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

MSHTA_POC.c

Posted Apr 19, 2005

Authored by Zwell

Proof-of-Concept code to generate a file with an embedded CLSID, demonstrating how the issues detailed in the iDEFENSE "MSHTA" advisory, MS05-016, and other places, can be exploited.

tags | exploit

advisories | CVE-2005-0063

SHA-256 | 7826084c6c139e8540b77c60563f111711b9055021c1118b3cabc3f461e16bb2

Download | Favorite | View

Related Files

04.12.05d.txt

Posted Apr 18, 2005

Site idefense.com

iDEFENSE Security Advisory 04.12.05 (d) - MSHTA vulnerabilities allow attacker-specified programs to be run by specifying a CLSID associated with the desired program.

tags | advisory, vulnerability

advisories | CVE-2005-0063

SHA-256 | 0183c6a07bad05a514025166c46b084f13076710dd0012c9d26bfb0369209dea

Download | Favorite | View