Full Disclosure mailing list archives

Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability

From: "pdp (architect)" <pdp.gnucitizen () googlemail com>
Date: Fri, 23 Feb 2007 22:38:13 +0000

indeed

On 2/23/07, Michal Zalewski <lcamtuf () dione ids pl> wrote:

On Fri, 23 Feb 2007, Stefan Esser wrote:

Proof of Concept:

   The Hardened-PHP Project is not going to release a proof of concept
   exploit for this vulnerability.


...because pretty much no exploit is needed. Scary. Good catch.

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



-- 
pdp (architect) | petko d. petkov
http://www.gnucitizen.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability Stefan Esser (Feb 23)
- Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability Michal Zalewski (Feb 23)
  - Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability pdp (architect) (Feb 24)
- Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability Matthew Flaschen (Feb 23)
  - Re: Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability Stefan Esser (Feb 24)