Vulnerability Development mailing list archives
Re[2]: IE troubles with image files
From: Hackemate.com.ar <hackemate () softhome net>
Date: Tue, 7 Aug 2001 22:36:00 -0300
yeah, as i see in yopur text tests , i was right about IE and its relation with extensions in my first advice posted here, as we can see, IE doesnt check the type of file by its extension, it does it vbyb the source code of the file. This is very dangerous, cos you can make IE execute HTML, VBsripts or other types of data with malicisious content or code. I dont know if microsoft is aware of this, anyway i will keep investigating this and then report them. Does anyone have the table of first code content depending on teh tipe of files? Greets for all KerozenE 1999-2001 c0oL! ICQ: 78480975 ********************************* Webmaster de www.hackemate.com.ar hackemate () softhome net ********************************* Moderador de HACKEMATE ML http://www.eListas.net/lista/hackemate/alta hackemate-alta () Elistas net ********************************* Editor Del EZine HC&KTM Mensual:HPVCC y todo el Under de la Net Http://www.hackemate.com.ar hackemate-alta () Elistas net ********************************* IRC.elsitio.com port:6667 #hackemate ********************************* Tuesday, August 07, 2001, 8:34:32 PM, you wrote: N> Hi,., N> I think this is somehow related to the topic. N> I'm sorry i cannot provide right now english explanation of the following N> examples, but i hope they are self explanatory. N> Spanish version of the explanations and personal point of view around all N> this matter can be found in Usenet or A.H.E. mailing lists. N> I just never thought this could have so much to discuss about, i just watch N> it up as a curiousity to play around. Anyway: N> http://www.hackindex.org/demos/demo1.txt N> http://www.hackindex.org/demos/demo2.wav N> http://www.hackindex.org/demos/demo3.txt N> http://www.hackindex.org/demos/demo4.ahe N> Cheers N> -- N> N.B.K / A.H.E. Cluster. N> nbk () hackindex org N> Alea Hackta Est N> ------------------------------------------------ N> http://www.hackindex.org N> http://nbk.hackindex.org N> http://hello.to/NBK N> ________________________ N> Administrador Lista HackIndex: N> hackindex-alta () eListas net N> Administrador Lista CrackIndex: N> crackindex-alta () eListas net N> ----------------------------------------- N> And now.....the bug: N> We die. N> -----------------------------------------
Current thread:
- IE troubles with image files Hackemate . com . ar (Aug 03)
- Re: IE troubles with image files melvinpettibone (Aug 03)
- SV: IE troubles with image files Patrik Birgersson (Aug 04)
- RE: IE troubles with image files Dom De Vitto (Aug 04)
- <Possible follow-ups>
- RE: IE troubles with image files NBK (Aug 07)
- Re[2]: IE troubles with image files Hackemate . com . ar (Aug 08)
- Re: Re[2]: IE troubles with image files Pauli Ojanpera (Aug 09)
- Re: IE troubles with image files Jan P Tietze (Aug 10)
