full-disclosure - Re: Saved XSS vulnerability in Internet Explorer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <003801cb8747$d7b4a8c0$c103fea9@ml>
Date: Thu, 18 Nov 2010 19:40:30 +0200
From: "MustLive" <mustlive@...security.com.ua>
To: "Jacky Jack" <jacksonsmth698@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Saved XSS vulnerability in Internet Explorer

Hello Jacky Jack!

It's another interesting aspect of saving html files, mentioned by RSnake
and I've also read it in 2007. He mentioned about risks of "save web page
complete" feature in Firefox (and such risks of this feature exist in other
browsers), and I wrote in my advisories in 2007, 2008 and 2010 about risk of
"save web page complete" and "save web archive" features. There was issue
with saving web archive in Opera (in Opera 9.x and previous versions) and
there was issue with saving web archive in IE (in 6, 7, 8 and previous
versions), as I wrote in last advisory.

You can read my article Local XSS (http://websecurity.com.ua/4219/). And
also my articles Code Execution via XSS in Internet Explorer
(http://securityvulns.ru/Udocument911.html) and Cross-browser Code Execution
via XSS (http://securityvulns.ru/Udocument941.html), which I wrote in 2008
concerning this kind of vulnerabilities in different browsers which I found.
How the attack can be elevated from XSS to CE. In case if you haven't read
them (it's English versions of the articles).

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua

----- Original Message ----- 
From: "Jacky Jack" <jacksonsmth698@...il.com>
To: "Christian Sciberras" <uuf6429@...il.com>
Cc: "Zach C" <fxchip@...il.com>; <full-disclosure@...ts.grok.org.uk>;
"MustLive" <mustlive@...security.com.ua>
Sent: Monday, November 15, 2010 6:29 PM
Subject: Re: [Full-disclosure] Saved XSS vulnerability in Internet Explorer

> It's logical to RSnake's
> http://ha.ckers.org/blog/20070201/firefox-save-as-complete-issue/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/