Re: Yahoo Messenger 7.0.0.438 Crash Tested

From: <Fatal_Error_at_gmx.be>
Date: 22 Jun 2006 15:48:08 -0000

('binary' encoding is not supported, stored as-is) It seems that any number of alternative strings will work as well:
example:
"msg:_________________________________________iframe onload=$InlineAction()>:)" without quotes works as well.

[, -, ^, {, [alt-0160]'s all seem to work as well

Is there a cross scripting vulnerability as well? Inserting script commands brings up an odd Script Error screen and a file name.
Received on Jun 22 2006