Microsoft Windows Script Host GetObject() File Disclosure Vulnerability

Bugtraq ID:	1718
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Sep 26 2000 12:00AM
Updated:	Sep 26 2000 12:00AM
Credit:	Posted to Bugtraq on September 26, 2000 by Georgi Guninski <[email protected]>.
Vulnerable:	Microsoft Windows Scripting Host 5.5 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 Microsoft Windows Scripting Host 5.1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft Windows Script Host GetObject() File Disclosure Vulnerability

Georgi Guninski <[email protected]> has created a demonstration page located at the following site:

http://www.guninski.com/getobject1.html

Markus Kern <[email protected]> has supplied htmlfile_FWE-exploit.htm proof of concept, which affects systems that are patched for this issue:

• /data/vulnerabilities/exploits/htmlfile_FWE-exploit.htm