|
Full Disclosure
mailing list archives
Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability
From: "pdp (architect)" <pdp.gnucitizen () googlemail com>
Date: Fri, 23 Feb 2007 22:38:13 +0000
indeed
On 2/23/07, Michal Zalewski <lcamtuf () dione ids pl> wrote:
On Fri, 23 Feb 2007, Stefan Esser wrote:
Proof of Concept:
The Hardened-PHP Project is not going to release a proof of concept
exploit for this vulnerability.
...because pretty much no exploit is needed. Scary. Good catch.
/mz
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
--
pdp (architect) | petko d. petkov
http://www.gnucitizen.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
By Date
By Thread
Current thread:
|