full-disclosure - MicroSopht IE (on XPee only) launches messenger by callto:gates or outlook by outlook:calendar protocols

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: 1 at malware.com (http-equiv@...ite.com)
Subject: MicroSopht IE (on XPee only) launches messenger by callto:gates or outlook by outlook:calendar protocols

<!-- 

I'm also really curious how this could be exploited. 

-->

What do you mean: "I'm also really curious how this could be 
exploited. "

it's already been exploited, it was all over the news and 
security lists a few months ago.

What is this: "eWEEK.com Security Center Editor" Is someone 
paying you? Can I be one too? How much you taking them for?

All I see from you is mass confusion:

"Am I missing something?"
"This really doesn't impress me"
"every bit of real testing I've seen shows this
is not a real vulnerability in IE."
"So you can do a cross-zone attack against the restricted zone"

who exactly are you?

-- 
http://www.malware.com