full-disclosure - IE7 Zero Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Fri May  5 21:13:23 2006
From: 0x80 at hush.ai (0x80@...h.ai)
Subject: IE7 Zero Day

It is amazing at the collective stupidity of so called security 
professionals.  Yet I get questioned as to why I don't want to join 
your pathetic industry.

>Yeah, but since he can't sploit this "vuln" he claims to have 
>found, it's
>perhaps not going to net him much interest nor cash from others, 
>being
>he's also holding his cards so close4 to his vest.

I said that it is not exploitable on IE 6.0.  It is exploitable on 
IE 7 all versions.  Perhaps reading comprehension would be good for 
you.

>One might as well post it this way:
>
>someplace, somewhere is a pc with a vulnerable application, guess 
>where it
>is and you can own it.  Oh, but, pay me big bucks first so I can 
>eat well
>for a day or two.

Are you the product of a broken condom during a gang rape?  Learn 
how to read before you pass judgement.  Better yet, learn how to 
find your own vulnerabilities instead of wasting your time 
researching other people's wireless security issues.

Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485