Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-3860. PoCs published by Khashayar Fereidani.
AI-analyzed exploit summary This Perl script generates an HTML file exploiting CVE-2009-3860, which abuses insecure methods in the iDefense COMRaider ActiveX control to create arbitrary directories and copy files, potentially leading to a denial-of-service condition.
Description
Multiple insecure method vulnerabilities in Idefense Labs COMRaider allow remote attackers to create or overwrite arbitrary files via the (1) CreateFolder and (2) Copy methods. NOTE: this might only be a vulnerability in certain insecure configurations of Internet Explorer.
Exploits (1)
This Perl script generates an HTML file exploiting CVE-2009-3860, which abuses insecure methods in the iDefense COMRaider ActiveX control to create arbitrary directories and copy files, potentially leading to a denial-of-service condition.