Poc For Arbitrary Command Execution With Ie+xpsp2

Secunia announced PoC for arbitrary command execution with IE+XPSP2:

- http://secunia.com/internet_explorer_comma…erability_test/

…yep, it fails, which means:

"…Any web site will be able to take total control of your computer without any interaction from you.
The "Internet Explorer Command Execution Vulnerability" allows an attacker to execute arbitrary commands/programs on your computer. Exploitation is only limited by the imagination of the attacker…"

FYI…from the Internet Storm Center:

- http://isc.sans.org/diary.php?date=2005-01-09
Updated January 9th 2005 23:45 UTC
"…The vulnerability is yet another cross-site scripting vulnerability. It will allow remote code execution on a victim's system just by visiting the website. The Storm Center has received one email of such a site and confirmed that it was actively using the exploit to attempt to download XP.exe from several locations. Currently vulnerable is IE6 on a fully patched WindowsXP system. As of now, there is no patch available. I know Symantec is detecting this as bloodhound.exploit.21 from what I have observed, but I'm not sure what other antivirus software is doing. It is advisable to keep your antivirus software updated and move to another web browser if possible. For more information, please see http://secunia.com/advisories/12889/ …"

FYI…

- http://secunia.com/advisories/12889/
Last Update: 2005-01-11
"2005-01-11: Updated solution. Microsoft has issued patches…
MS05-001 (KB890175): http://www.microsoft.com/technet/security/…n/MS05-001.mspx …"

(…updates the ActiveX control Hhctrl.ocx)

>>> WindowsUpdate