Re: [Full-Disclosure] EEYE: Internet Explorer Object Data Remote Execution Vulnerability

From: gregh (chows_at_ozemail.com.au)
Date: 08/22/03

  • Next message: Kurt Seifried: "Re: [Full-Disclosure] Command Injection Vulnerability in stat.qwest.net - OFFTOPIC"
    To: "Marc Maiffret" <marc@eeye.com>, "Full-Disclosure" <full-disclosure@lists.netsys.com>
    Date: Fri, 22 Aug 2003 16:09:07 +1000
    
    

    > ----- Original Message -----
    > From: Marc Maiffret
    > To: Full-Disclosure
    > Sent: Friday, August 22, 2003 4:56 AM
    > Subject: [Full-Disclosure] EEYE: Internet Explorer Object Data Remote Execution Vulnerability

    > The first time I sent this email it included example HTML code. That HTML
    > code would have no affect on eMail clients as this is not a HTML email nor
    > was the data properly formatted, etc..., etc... However, due to VERY POORLY

    Mcafee VSO picked it up as potentially bad code when set heuristic.

    Greg.

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: Kurt Seifried: "Re: [Full-Disclosure] Command Injection Vulnerability in stat.qwest.net - OFFTOPIC"

    Relevant Pages

    • Re: Sendmail - email report available ?
      ... To a small extent they're lying. ... (Sales speak, to be generous...) ... They're using HTML email and links in the email itself. ... The main problems with that are: 1) not all email clients will fetch images ...
      (comp.mail.sendmail)
    • Re: Outlook HTML
      ... > you checked how it displays in other email clients that handle HTML email? ... > good source for information about coding HTML for display in outlook? ...
      (microsoft.public.inetsdk.html_authoring)
    • Re: Outlook HTML
      ... AFAIK, Outlook uses the same engine as IE, so output should be similar. ... you checked how it displays in other email clients that handle HTML email? ... I would shy away from using HTML email - many people wont accept it ... good source for information about coding HTML for display in outlook? ...
      (microsoft.public.inetsdk.html_authoring)