Full Disclosure mailing list archives
Mozilla Foundation GIF Overflow
From: Steven Rakick <stevenrakick () yahoo com>
Date: Fri, 25 Mar 2005 12:39:54 -0800 (PST)
Hi all, I was just glancing at the Internet Security Systems website and I noticed the following statement "ISS provides Ahead of the Threat protection for Mozilla and Firefox Browsers". Clicking the related link they mention that ISS Network Sensor 7.0, Proventia A and G100, G400, G200, G1200, G2000 and M series all provide "preemptive protection for these vulnerabilities". I remember a couple months ago, Darren Bounds from Intrusense released an advisory regarding weak support for inspecting base64 encoded images in AV, IDS and IPS technologies (ISS being one of the them). (Advisory: http://www.intrusense.com/av-bypass/image-bypass-advisory.txt) My question is this. Did ISS ever add support for detecting this RFC 2397 images or are they going to pass through undetected? Mozilla and Firefox both support this spec so it seems like a very trivial attack vector to exploit... once again. Also, what other vendors have now added support for RFC 2397 inspection? Any insight would be greatly appreciated. Steve __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Mozilla Foundation GIF Overflow Steven Rakick (Mar 25)
- Re: Mozilla Foundation GIF Overflow Trog (Mar 26)
- Re: Mozilla Foundation GIF Overflow Darren Bounds (Mar 26)
- Re: Mozilla Foundation GIF Overflow Trog (Mar 26)