Full Disclosure mailing list archives
Re: Universal XSS with PDF files: highly dangerous
From: Stefano Di Paola <stefano.dipaola () wisec it>
Date: Fri, 05 Jan 2007 17:40:59 +0100
This is in the original advisory. http://www.wisec.it/vulns.php?page=9 Il giorno ven, 05/01/2007 alle 15.53 +0200, Kristina Lein ha scritto:
Also I have to tell that my firefox crashed when I appended some random document.write('foobar') to exploit. I suppose it wrote it to PDF memory?! In this case we maybe can also execute code? Scary. Tõnu
Regards Stefano -- ...oOOo...oOOo.... Stefano Di Paola Software & Security Engineer Web: www.wisec.it .................. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Universal XSS with PDF files: highly dangerous, (continued)
- Re: Universal XSS with PDF files: highly dangerous Matthew Flaschen (Jan 05)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous Jean-Jacques Halans (Jan 03)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous Larry Seltzer (Jan 03)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous Jim Manico (Jan 04)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous RSnake (Jan 03)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous M . B . Jr . (Jan 08)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous Jim Manico (Jan 09)
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous HASEGAWA Yosuke (Jan 04)
- Re: Universal XSS with PDF files: highly dangerous Kristina Lein (Jan 05)
- Re: Universal XSS with PDF files: highly dangerous pdp (architect) (Jan 05)
- Re: Universal XSS with PDF files: highly dangerous Stefano Di Paola (Jan 05)
- Re: Universal XSS with PDF files: highly dangerous The Anarcat (Jan 08)
- Re: Universal XSS with PDF files: highly dangerous Matthew Flaschen (Jan 08)
- Re: Universal XSS with PDF files: highly dangerous Juha-Matti Laurio (Jan 04)
- Re: Universal XSS with PDF files: highly dangerous Larry Seltzer (Jan 04)
- Re: Universal XSS with PDF files: highly dangerous Juha-Matti Laurio (Jan 04)
- Re: Universal XSS with PDF files: highly dangerous T Biehn (Jan 04)
- Re: Universal XSS with PDF files: highly dangerous pdp (architect) (Jan 04)
- Re: Universal XSS with PDF files: highly dangerous T Biehn (Jan 04)