Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation

To: bugtraq@xxxxxxxxxxxxxxxxx, submit@xxxxxxxxxxx
Subject: Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation
From: Aditya K Sood <0kn0ck@xxxxxxxxxxxx>
Date: Wed, 26 Nov 2008 08:38:18 +0530
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
User-agent: Thunderbird 2.0.0.18 (Windows/20081105)

Hi All

The Google chrome new version 0.4.154.25 is also suffering from this
vulnerability.The full POC have been released at milw0rm.

Have a look at it: http://milw0rm.com/exploits/7226

The problem is this most of web servers have anti viruses which
treated it as URL Spoofing virus. Anyways the POC has been
released for the latest version.

Regards
Aditya KS
http://www.secniche.org

Prev by Date: Re: [SVRT-05-08] Critical BoF vulnerability found in ffdshow affecting all internet browsers (SVRT-Bkis)
Next by Date: [USN-668-1] Thunderbird vulnerabilities
Previous by thread: [USN-678-1] GnuTLS vulnerability
Next by thread: [USN-668-1] Thunderbird vulnerabilities
Index(es):
- Date
- Thread