Changeset 1540

Timestamp:

02/04/08 15:32:22 (7 months ago)

Author:

jose

Message:

[phoneyc]
support for FaceBook? PhotoUploader? overflow in properties
vuln module, exploit code

Files:

• phoneyc/trunk/ActiveX.py (modified) (3 diffs)
• phoneyc/trunk/modules/jscript/FacebookPhotoUploader.js (added)
• phoneyc/trunk/tests/5049.html (added)

phoneyc/trunk/ActiveX.py

@@ -59 +59 @@
-        self.clsid['22FD7C0A-850C-4A53-9821-0B0915C96139'] = YahooJukebox()
-        self.clsid['5F810AFC-BB5F-4416-BE63-E01DD117BD6C'] = YahooJukebox()
+        self.clsid['6E5E167B-1566-4316-B27F-0DDAB3484CF7'] = FacebookPhotoUploader()
+        self.clsid['5C6698D9-7BE4-4122-8EC5-291D84DBD4A0'] = FacebookPhotoUploader()
+        self.clsid['BA162249-F2C5-4851-8ADC-FC58CB424243'] = FacebookPhotoUploader()
-
-        self.clsname = {}
@@ -81 +84 @@
-        self.clsname['GomWebCtrl.GomManager.1'] = GomWeb()
-        self.clsname['QMPUpgrade.Upgrade.1'] = Move()
+        self.clsname['TheFacebook.FacebookPhotoUploader4.4.1'] = FacebookPhotoUploader()
-
-        # set up the pure JScript version
@@ -398 +402 @@
-        self.description = 'Yahoo! Music Jukebox 2.x'
-
+class FacebookPhotoUploader(ActiveX):
+    def __init__(self):
+        self.js_src = self.load_js_src('FacebookPhotoUploader.js')
+        self.classname = 'FacebookPhotoUploader'
+        self.cve_id = ('CVE-NOMATCH', )
+        self.description = 'Facebook Photo Uploader 4.x'
+