full-disclosure - Unofficial Internet Explorer FRAME/IFRAME fix

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <41941EC4.90908@cherryware.de>
From: tr-lists at cherryware.de (Thomas Rogg)
Subject: Unofficial Internet Explorer FRAME/IFRAME fix

Hello list,

http://www.cherryware.de/framefix/

This is a program, which patches the FRAME/IFRAME vulnerability 
described on the mailing list BugTraq  
(http://www.securityfocus.com/archive/1/380175) on Windows 2000 and XP. 
This vulnerability has been public for a rather short time and is 
already being used by MyDoom.AI and MyDoom.AH to spread themselves.

This patch does just-in-time patching. It does not change any system 
files, but rather installs a program that changes the loaded system 
files' code before a HTML page is loaded. Because of this, the patch is 
easily uninstallable.

Any comments appreciated,

Thomas Rogg