Home page logo

bugtraq logo Bugtraq mailing list archives

Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
From: "Geo." <geoincidents () nls net>
Date: Sun, 7 Oct 2007 01:40:32 -0400

----- Original Message ----- From: "Thierry Zoller" <Thierry () Zoller lu>

The user clicks on a mailto link, is that untrusted code?

Depends on where the link comes from. If it's a shortcut on the users desktop no it's not untrusted, if it's in a PDF file you received in your email then yes it's untrusted.

Anyways, the mailto link
POST IE7 has a flaw/threat/vulnerablity it hasn't had PRE IE7.

The problem here is the root cause, the root cause is that IE7

Ok I'm game, so then show me this exploit without having Acrobat on your system. IE7 handles mailto links in untrusted web pages. Put the mailto link in an untrusted html page and make it work with IE7.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]