mailing list archives
Re: Internet Explorer drag&drop 0day
From: Thierry Zoller <Thierry () Zoller lu>
Date: Tue, 14 Feb 2006 22:45:44 +0100
M> under the heading "Do you have a demonstration ?", both links to the
M> demo "exploit" are dead.
Yes they are, I was to lazy to remove them. I will replace them with
some working PoC heise.de links.
M> I assume in an attempt to hide the target url you meant to use the
M> but surely not the * onmouseover * !
No I used on mouse over. The "exploit" was a PoC nothing more, I think
to recall it launched calc.exe or similar (google for shreddersub7)
M> You are aware that you current chosen method would have launched your
M> exploit on the machine of a prospective customer,
The links are supposed to do so.
M> Please give your web designer a whack on the side of the head though.
That would be me.... ouch! that hurt.
I know I need a redesign for sake of usability.
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/