Changeset 1501

Timestamp:

01/10/08 16:31:44 (9 months ago)

Author:

jose

Message:

[phoneyc]
support for Microsoft Rich Textbox Control 6.0 (SP6) "SaveFile?()" Insecure Method
pointed out by oxff

Files:

• phoneyc/trunk/ActiveX.py (modified) (2 diffs)
• phoneyc/trunk/modules/jscript/MSRICHTXT.js (added)
• phoneyc/trunk/tests/4874.html (added)
• phoneyc/trunk/tests/msrichtxt.html (added)

phoneyc/trunk/ActiveX.py

@@ -31 +31 @@
-        self.clsid['7CB9D4F5-C492-42A4-93B1-3F7D6946470D'] = HPInfo()
-        self.clsid['A7CD2320-6117-11D7-8096-0050042A4CD2'] = MSVFP()
+        self.clsid['3B7C8860-D78F-101B-B9B5-04021C009402'] = MSRICHTXT()
+        self.clsid['B617B991-A767-4F05-99BA-AC6FCABB102E'] = MSRICHTXT()
-
-        self.clsname = {}
@@ -218 +220 @@
-        self.cve_id = ('CVE-NOMATCH', )
-        self.description = 'Microsoft VFP_OLE_Server'
+
+class MSRICHTXT(ActiveX):
+    def __init__(self):
+        self.js_src = self.load_js_src('MSRICHTXT.js')
+        self.classname = 'MSRICHTXT'
+        self.cve_id = ('CVE-NOMATCH', )
+        self.description = 'Microsoft Rich Textbox Control 6.0 (SP6)'