funsec mailing list archives

Re[6]: Ilfak's WMF patch


From: Ilfak Guilfanov <ig () datarescue be>
Date: Mon, 2 Jan 2006 18:14:01 +0100


Monday, January 2, 2006, 4:18:55 PM, you wrote:

RMS> First off, thanks for putting this .WMF patch
RMS> together.  It's very useful.

My pleasure!

RMS> I also have a technical question about .WMF files. 
RMS> If a .WMF is directly
RMS> displayed by Internet Explorer using an <img src=>
RMS> tag, why isn't the
RMS> SETABORT escape sequence being executed?  Is IE
RMS> filtering out these escape
RMS> sequences already?

Sorry, I'm afraid I can not answer off-hand. I do not do
security
research as my job. This time the problem was too acute not
to react...

--
Best regards,
 Ilfak                            mailto:ig () datarescue be

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: