Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: GDI+ and Internet Explorer question

Re: GDI+ and Internet Explorer question

From: H D Moore <sflist_at_digitaloffense.net>
Date: Sun, 10 Jun 2007 17:02:59 -0500

IE has its own image decoders for many image types (jpeg, ico, etc). You
can trigger this bug remotely by renaming your .ico to .emf or .wmf,
which forces it be opened by the Picture and Fax Viewer using GDI+.

-HD

On Saturday 09 June 2007 06:40, gljuposti_at_gmail.com wrote:
> fails to crash my Internet Explorer. So I was wondering, does Internet
> Explorer utilizes GDI+ for image decoding? If it does not, what
> component(s) does it use?
Received on Jun 11 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos