Re: RE: FWD: Internet Explorer URL parsing vulnerability

["S . f . Stover" <attica () stackheap org>]

On 09 Dec 03 10:22:59AM S G Masood[sgmasood () yahoo com] wrote:
: ># POC ##########
: >http://www.zapthedingbat.com/security/ex01/vun1.htm
: 

Interestingly enough, MSIE for OS X doesn't display this behavior.  My address
bar contained this URL:

http://www.microsoft.com%01 () zapthedingbat com/security/ex01/vun2.htm



-- 

aka Dolph Longhorn
GPG Key ID: 0xF8F859D0
http://pgp.mit.edu:11371/pks/lookup?search=0xF8F859D0&op=index

"There is no such thing as right and wrong, there's just popular opinion."
-Jeffrey Goines

Attachment: _bin
Description: