full-disclosure - IE exploit runs code from graphics?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <f62e025b040626191274c022c5@mail.gmail.com>
From: packetmaster at gmail.com (Jimmy Mitchener)
Subject: IE exploit runs code from graphics?

On Sat, 26 Jun 2004 11:52:08 +0530, Aditya, ALD [ Aditya Lalit
Deshmukh ] <aditya.deshmukh@...ine.gateway.technolabs.net> wrote:
> 
> > files (.CHM) from some web site, causing the HTML code inside the .CHM
> > to be run in the "My Computer" security zone.  Typically (like all but
> > one of _dozens and dozens_ of these I've seen) the "inner" HTML run
> 
> this is one of the  _dozens and dozens_  reasons to use mozilla on untrusted sites and use ie to access internal websites if they do depend of some ie features but set the default browser to mozilla so that when ever the user cliks something it opens in mozilla

Why would you assume Mozilla is any less vulnerable? Perhaps not
publicly, it is simply not as large of a target as IE. You should
really not be browsing on an "important" system no matter what. Unless
perhaps you have systrace or SELinux guarding it (which even then is
not 100%).

Jimmy.