[Full-Disclosure] GOOROO CROSSING: File Spoofing Internet Explorer 6

http-equiv_at_excite.com
Date: 01/27/04

  • Next message: Tim Yamin: "[ GLSA 200401-03 ] Apache mod_python Denial of Service vulnerability" 
    To: <full-disclosure@lists.netsys.com>
Date: Tue, 27 Jan 2004 17:28:19 -0000

    Tuesday, January 27, 2004

    Trivial file spoofing in Internet Explorer 6.0.2800.1106 and all
    of 'its' patches to date on WIN XP [probably others]:

    Content-Disposition: attachment; filename=malware.{3050f4d8-98B5-
    11CF-BB82-00AA00BDCE0B}fun_ball_gites_pie_throw%2Empeg"

    Absolute bare minimum working demo [perhaps even feeble] as we
    are absolutely confident the self-appointed resident gooroo will
    be along shortly handing out packets of two cents to everyone
    thus saving us the effort to illustrate in even greater detail
    to those lacking imagination:

    http://www.malware.com/gooroo.html

    End Call 

    -- 
http://www.malware.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Next message: Tim Yamin: "[ GLSA 200401-03 ] Apache mod_python Denial of Service vulnerability"

    Relevant Pages
    • Quantcast