Full Disclosure mailing list archives
Re: Re: shell:windows
From: Barry Fitzgerald <bkfsec () sdf lonestar org>
Date: Mon, 12 Jul 2004 13:49:03 -0400
Larry Seltzer wrote:
No - there are numerous ways to force input into places like the address bar. As someone else already stated, for this to work you have to be able to push it into that area. There are numerous ways to do this and for a person with a little more time on their hands, finding one that works properly should not be difficult.meaningful problem either, then we can agree to disagree on the scope. I'll agree that getting this issue to run code of the choosing of the attacker is more difficult thansome other unpatched IE holes, but it is not impossible.I disagree completely. The Mozilla problem, which I'll readily agree is not in the same league with most of the recent IE problems, allowed a local program to execute simply by visiting a web page that had the appropriate shell: link in a META tag. You actually think this is on the same level as requiring a user to type "shell:windows\system32\foo.exe" into the Address bar?
Stop thinking about this as being a one-dimensional issue. Security issues very rarely are that one-dimensional.
-Barry _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: shell:windows Nick Eoannidis (Jul 10)
- Re: Re: shell:windows Barry Fitzgerald (Jul 12)
- RE: Re: shell:windows Larry Seltzer (Jul 12)
- <Possible follow-ups>
- Re: Re: shell:windows Barry Fitzgerald (Jul 12)
- RE: Re: shell:windows Larry Seltzer (Jul 12)
- Re: Re: shell:windows Barry Fitzgerald (Jul 12)
- Re: Re: shell:windows Nick FitzGerald (Jul 12)
- RE: Re: shell:windows Perrymon, Josh L. (Jul 12)
- Re: Re: shell:windows Barry Fitzgerald (Jul 12)