Full Disclosure mailing list archives

Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how here and now...


From: Jeffrey Walton <noloader () gmail com>
Date: Sat, 11 Jun 2011 21:18:53 -0400

On Sat, Jun 11, 2011 at 9:06 PM, -= Glowing Doom =- <secn3t () gmail com> wrote:

It is now, over 1yr old atleast and exists in riched20.dll.
This PoC info is over for me also.
Microsoft had problems with a backspace in the past. Search for "CSRSS
Backspace Bug".

[SNIP

Jeff

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: