IE ADDDESKTOPCOMPONENT() CROSS ZONE SCRIPTING Vulnerability

Microsoft Internet Explorer 6 "external.AddDesktopComponent()" function contains a cross site scripting vulnerability that allows attackers to execute arbitrary code in the context of the Internet Explorer´s local machine zone because it does not correctly validate characters passed to the function. Script code is written and executed in "Desktop.htt" local file that belongs to the local machine zone and thus allows arbitrary code to be executed. The user interaction required is either a single click inside a webpage, double click or key pressing, usually used in captchas. The demonstration calls "Help and Support Center" and executes Windows calculator.

Important: This bypasses the pop-up blocker and the local machine zone lockdown features.

link to full article and P.O.C:

http://secumania.info/joomla/index.php/component/k2/item/13-microsoft-internet-explorer-6-adddesktopcomponent-cross-zone-scripting-vulnerability

Author: Eduardo Prado (me).

Видео IE ADDDESKTOPCOMPONENT() CROSS ZONE SCRIPTING Vulnerability канала Edu Braun