Re: Automatic MIME type detection in Internet Explorer 6.x allowed

[Denis Jedig <seclists () syneticon de>]

Thor Larholm wrote:
> Denis Jedig wrote:
>
> > If you change file headers to JPEGs, it's not an executable file any 
> > more - that simple. 
>
> When the file headers are JPEG it's no longer an executable file - for 
> that specific HTTP session of that specific IEXPLORE instance.

Well, it will carry on having JPEG headers for every instance of 
IEXPLORE regardless of the HTTP sessions currently open. So how can this 
be a security problem?

> Outside 
> those constraints, you have still managed to plant an EXE file in a 
> known/predictable location on the target system.

A file named EXE but not a valid executable in itself, right? I remember 
there was some interesting work some months ago on header ambiguity but 
I can't find the reference right now.

Regards,

Denis