<<< Date Index >>> <<< Thread Index >>>

Re: Remote overflow in MSIE script action handlers (mshtml.dll)

To: Michal Zalewski <lcamtuf@xxxxxxxxxxxx>
Subject: Re: Remote overflow in MSIE script action handlers (mshtml.dll)
From: Tomasz Onyszko <t.onyszko@xxxxxx>
Date: Thu, 16 Mar 2006 23:05:20 +0100
Cc: Daniel Bonekeeper <thehazard@xxxxxxxxx>, bugtraq@xxxxxxxxxxxxxxxxx, vulnwatch@xxxxxxxxxxxxx, full-disclosure@xxxxxxxxxxxxxxxxx
In-reply-to: <Pine.LNX.4.58.0603162204310.5180@dione>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: http://www.w2k.pl
References: <Pine.LNX.4.58.0603161934461.5180@dione> <e1e1d5f40603161302h5ff59790oab37daa1688de890@xxxxxxxxxxxxxx> <Pine.LNX.4.58.0603162204310.5180@dione>
Reply-to: t.onyszko@xxxxxx
User-agent: Thunderbird 1.5 (Windows/20051201)

Michal Zalewski wrote:

  iexplore http://lcamtuf.coredump.cx/iedie.html


In this way it works on IE7 Beta as well

--
Tomasz Onyszko
http://www.w2k.pl/blog/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)

References:
- Remote overflow in MSIE script action handlers (mshtml.dll)
  - From: Michal Zalewski
- Re: Remote overflow in MSIE script action handlers (mshtml.dll)
  - From: Daniel Bonekeeper
- Re: Remote overflow in MSIE script action handlers (mshtml.dll)
  - From: Michal Zalewski

Prev by Date: [ GLSA 200603-14 ] Heimdal: rshd privilege escalation
Next by Date: [ GLSA 200603-13 ] PEAR-Auth: Potential authentication bypass
Previous by thread: Re: Remote overflow in MSIE script action handlers (mshtml.dll)
Next by thread: Re: Remote overflow in MSIE script action handlers (mshtml.dll)
Index(es):
- Date
- Thread