RE: Microsoft Internet Explorer Full RemoteCompromise w/o User Intervention

["Alerta RedSegura" <alerta () redsegura com>]

I have run the exploit at http://freehost07.websamba.com/greyhats/sp2rc.htm
on several fully patched Windows XP SP2 boxes here (no special config, hta's
and scripting enabled) and no file gets created or run.  Just a help window
displayed and that's it.


Regards,


Inigo Koch
Red Segura




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html