lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: 25 Nov 2003 10:09:55 -0000
From: Liu Die Yu <>
Subject: Cache Disclosure Leads to MYCOMPUTER Zone and Remote Compromise

Cache Disclosure Leads to MYCOMPUTER Zone and Remote Compromise

OS:WinXp, CN version
Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16

By combining cache file disclosure and several other unpatched vulnerabilties, an malicious INTERNET page can reach MYCOMPUTER zone. The demo uses Adodb.Stream to launch a remote compromise attack.

There are two harmless demos:
Online demo, powered by ASP:
(runs harmless demonstration executable)

[technical details]
First, place an HTML file in IE cache directory and get its location.
(Liu Die Yu's
Second, this HTML file can be parsed as an HTML page and treated as in MYCOMPUTER security zone.
(Mindwarper of's
(Liu Die Yu's
At last, Overwrite NOTEPAD.EXE and make IE launch it by openning a view-source protocol URL:

Disable Active Scripting in INTERNET zone, so HTML page opened in the cache can't send information back to the attacker.

greetings to:
Drew Copley, dror, guninski, vadim and mkill.

all mentioned resources can always be found at UMBRELLA.MX.TC

LiuDieyuinchina [N0-@...2m]
UMBRELLA.MX.TC ==> How to contact "Liu Die Yu"

I would like to work professionally as a security researcher/bug finder. 

See my resume at my site. I am very eager to work, flexible, and 
extremely productive. I have a top notch resume, with credentials 
from leading bug finders. I am willing to work per contract, relocate, 
or telecommute. 
[Give a Hand]
I haven't got a job as a security researcher yet and my family don't support my security work - so, I don't have a computer of my own. Please consider about donating at:

Powered by blists - more mailing lists