Bugtraq mailing list archives

Re: IE remote code execution

From: Jouko Pynnonen <jouko () iki fi>
Date: Mon, 20 Oct 2003 21:53:09 +0300


On Sun, Oct 19, 2003 at 12:15:39AM +0200, Marcin Ulikowski wrote:

Header("Content-Disposition: inline; filename=readme.txt%00code.exe");



This is not new, I reported this in 2001:

http://msgs.securepoint.com/cgi-bin/get/bugtraq0201/132.html



-- 
Jouko Pynnönen          http://iki.fi/jouko/
jouko () iki fi

Current thread:

IE remote code execution Marcin Ulikowski (Oct 20)
- Re: IE remote code execution Jouko Pynnonen (Oct 20)
- <Possible follow-ups>
- Re: IE remote code execution K-OTiK Security (Oct 20)
- RE: IE remote code execution Thor Larholm (Oct 21)