full-disclosure - Re: Several Things about IE bugs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200312151559.hBFFxHq17877@netsys.com>
From: gui at goddessmoon.org (Poof)
Subject: Re: Several Things about IE bugs

*starts to remember why he doesn't have windows installed on a 'normal'
path.

Meh. -_- What happens with these exploits if you use %SystemRoot% instead?
Will that work within IE?

~

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-
> admin@...ts.netsys.com] On Behalf Of http-equiv@...ite.com
> Sent: Monday, December 15, 2003 10:13 AM
> To: bugtraq@...urityfocus.com; NTBugtraq@...tserv.ntbugtraq.com
> Cc: full-disclosure@...ts.netsys.com
> Subject: [Full-Disclosure] Re: Several Things about IE bugs
> 
> 
> 
> Unbelievable. Yet another 'silent delivery and installation of an
> executable on a target computer. No client input other than viewing
> a web page ' fully patched XP and Internet Explorer 6 series of
> browsers:
> 
> http://www.safecenter.net/UMBRELLAWEBV4/1stCleanRc/1stCleanRc-
> Xp/index.html
> 
> All one needs to do is point a spoofed link to something like this.
> 
> Can the so-called "PCHealth" gimmick be uninstalled?
> 
> 
> --
> http://www.malware.com
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html