Re: Automatic MIME type detection in Internet Explorer 6.x allowed

[Denis Jedig <seclists () syneticon de>]

knight4vn () yahoo com wrote:

> Automatic MIME type detection in Internet Explorer 6.x allowed 
> downloading executable file automatically

If you change file headers to JPEGs, it's not an executable file any 
more - that simple. Even if it were, "downloading" something and placing 
it in temporary files is not a vulnerability. Executing it is, but this 
can't happen with the described mechanisms.

Denis