Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [Full-Disclosure] MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC exploit (was: python does mangleme (with IE bugs!))
From: Menashe Eliezer <menashe@xxxxxxxxxx>
Date: 8 Nov 2004 04:34:00 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

In-Reply-To: <BAY10-DAV29UqLpHkat00000751@xxxxxxxxxxx>

The published exploit is working also with the &lt;EMBED&gt; tag, and not just 
with the <IFRAME> and the <FRAME> tags.
Finjan's advisory can be found at: 
http://www.finjan.com/SecurityLab/AttackandExploitReports/alert_show.asp?attack_release_id=114

==
Regards,
Menashe Eliezer
Senior application security architect
Malicious Code Research Center
Finjan Software
http://www.finjan.com/mcrc
 
Prevention is the best cure!

Prev by Date: [SECURITY] [DSA 586-1] New ruby packages fix denial of service
Next by Date: [CLA-2004:888] Conectiva Security Announcement - libtiff3
Previous by thread: [SECURITY] [DSA 586-1] New ruby packages fix denial of service
Next by thread: [CLA-2004:888] Conectiva Security Announcement - libtiff3
Index(es):
- Date
- Thread