mailing list archives
Re: Windows (XP SP2) Remote code executionwithparameters
From: "morning_wood" <se_cur_ity () hotmail com>
Date: Tue, 28 Dec 2004 07:05:45 -0800
hhctrl.ocx is not installed by default in all SP1s but is on all SP2.
Therefore when the exploit page tries to create the object he cannot
find it so it tries to install it. On SP2 it exists by default therefore
i replied to this because of this statement by the O.P..
"Any system running any Microsoft Windows XP edition with Internet Explorer
or higher, even with SP2 applied."
this suggests that all XP are affected by default, including sp2.
p.s. I have noticed that the final pre-release of SP2 is much better ( in my
performance and security wise. ( and it retains raw sockets ). In SP2rc2,
blocker stopped the PoC at default settings.
Full-Disclosure - We believe in it.