funsec mailing list archives

Re: Re: Image-handling flaws put Windows PCs at risk


From: Jeff Rosowski <rosowskij () ie ymp gov>
Date: Tue, 8 Nov 2005 17:24:52 -0800 (PST)

When I see these kind of bugs, I always wonder if there is some way to turn
off the unneeded feature rather than getting a patch.  Disabling the feature
protects against the next security hole in the unneeded feature......  I
also wonder if there is a some method of scanning the registry to learn
about all the image file formats that IE supports in the <img> tag and
similar tags.  Last time I checked, the GIF and JPEG formats are all we
need.

And PNG
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: