Changeset 1515

Timestamp:

01/14/08 16:38:16 (8 months ago)

Author:

jose

Message:

[phoneyc]
support for iMesh <= 7.1.0.x IMWebControl Class (IMWeb.dll 7.0.0.x)
vuln module and exploit code

Files:

• phoneyc/trunk/ActiveX.py (modified) (3 diffs)
• phoneyc/trunk/modules/jscript/IMWebControl.js (added)
• phoneyc/trunk/tests/rgod_imesh.html (added)

phoneyc/trunk/ActiveX.py

@@ -38 +38 @@
-        self.clsid['D64CF6D4-45DF-4D8F-9F14-E65FADF2777C'] = DVRHOSTWeb()
-        self.clsid['D050D736-2D21-4723-AD58-5B541FFB6C11'] = DivX()
+        self.clsid['7C3B01BC-53A5-48A0-A43B-0C67731134B9'] = IMWebControl()
-
-        self.clsname = {}
@@ -52 +53 @@
-        self.clsname['Ccpm.ProxyManager.1'] = StreamAudioChainCast()
-        self.clsname['PdvrAtl.PdvrOcx.1'] = DVRHOSTWeb()
+        self.clsname['IMWeb.IMWebControl.1'] = IMWebControl()
-
-        # set up the pure JScript version
@@ -270 +272 @@
-        self.cve_id = ('CVE-NOMATCH', )
-        self.description = 'DivX Player 6.6.0 ActiveX Control'
+
+class IMWebControl(ActiveX):
+    def __init__(self):
+        self.js_src = self.load_js_src('IMWebControl.js')
+        self.classname = 'IMWebControl'
+        self.cve_id = ('CVE-2007-6493', 'CVE-2007-6492')
+        self.description = 'iMesh 7.x ActiveX control'