funsec mailing list archives

Re: Secunia Reports Another IE7 Flaw


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Wed, 25 Oct 2006 16:43:57 -0400

How about "less than critical, much less"

or is critical the only measurement secunia has in its library?

hmm:

Extremely Critical (5 of 5):
Highly Critical (4 of 5):
Moderately Critical (3 of 5):
Less Critical (2 of 5):
Not Critical (1 of 5):

Guess me and Secunia use different dictionaries, I think critical, in
relation to a security advisory means:

: of essential importance; indispensable: a critical ingredient.

I guess they mean:

of Moderately essential importance; Moderately indispensable: a
Moderately critical ingredient

hehe damn germans! ;-)


-JP

On 10/25/06, Fergie <fergdawg () netzero net> wrote:
That's probably why it's rated "less critical". :-)

- ferg


-- Larry Seltzer <Larry () larryseltzer com> wrote:

>>The Secunia demo didn't really work for me.  I've configured IE7 to
generate pop-ups as new tabs and the address bar has different
dimensions than their demo is expecting.

Of course that's not the default. I tried it and the exploit seems to
depend on the exact layout of the window, and the "fake" address was
scrolled off some to the left. It's something, but not much.

Larry Seltzer


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: