Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)

To: "pdp (architect)" <pdp.gnucitizen@xxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
From: Michal Zalewski <lcamtuf@xxxxxxxxxxxx>
Date: Sun, 11 Feb 2007 21:56:49 +0100 (CET)
Cc: bugtraq@xxxxxxxxxxxxxxxxx, full-disclosure@xxxxxxxxxxxxxxxxx
In-reply-to: <6905b1570702111215ie807c52t4b60d74c9c090e0a@xxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <Pine.LNX.4.58.0702112047050.30989@dione> <6905b1570702111215ie807c52t4b60d74c9c090e0a@xxxxxxxxxxxxxx>

On Sun, 11 Feb 2007, pdp (architect) wrote:

> IE is vulnerable too, since I used to play around with this bug long
> time ago.

Possibly MS00-093, but that's long fixed. But yes, MSIE variant is
possible, though more contrived.

/mz

Follow-Ups:
- Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  - From: pdp (architect)

References:
- Firefox focus stealing vulnerability (possibly other browsers)
  - From: Michal Zalewski
- Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  - From: pdp (architect)

Prev by Date: MediaWiki Full Path Disclosure Vulnerability
Next by Date: Re: mcRefer SQL injection
Previous by thread: Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
Next by thread: Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
Index(es):
- Date
- Thread