Vulnerability Development mailing list archives

Re[2]: IE troubles with image files


From: Hackemate.com.ar <hackemate () softhome net>
Date: Tue, 7 Aug 2001 22:36:00 -0300

yeah, as i see in yopur text tests , i was right about IE and its
relation with extensions in my first advice posted here, as we can see,
IE doesnt check the type of
file by its extension, it does it vbyb the source code of the file.
This is very dangerous, cos you can make IE execute HTML, VBsripts or
other types of data with malicisious content or code. I dont know if
microsoft is aware of this, anyway i will keep investigating this and
then report them.

Does anyone have the table of first code content depending on teh tipe
of files?

Greets for all

KerozenE 1999-2001 c0oL!
ICQ: 78480975
*********************************
Webmaster de www.hackemate.com.ar
hackemate () softhome net
*********************************
Moderador de HACKEMATE ML
http://www.eListas.net/lista/hackemate/alta
hackemate-alta () Elistas net
*********************************
Editor Del EZine HC&KTM Mensual:HPVCC y todo el Under de la Net
Http://www.hackemate.com.ar
hackemate-alta () Elistas net
*********************************
IRC.elsitio.com port:6667 #hackemate
*********************************


Tuesday, August 07, 2001, 8:34:32 PM, you wrote:

N> Hi,.,

N> I think this is somehow related to the topic.
N> I'm sorry i cannot provide right now english explanation of the following
N> examples, but i hope they are self explanatory.

N> Spanish version of the explanations and personal point of view around all
N> this matter can be found in Usenet or A.H.E. mailing lists.

N> I just never thought this could have so much to discuss about, i just watch
N> it up as a curiousity to play around. Anyway:

N> http://www.hackindex.org/demos/demo1.txt
N> http://www.hackindex.org/demos/demo2.wav
N> http://www.hackindex.org/demos/demo3.txt
N> http://www.hackindex.org/demos/demo4.ahe

N> Cheers
N> --
N> N.B.K / A.H.E. Cluster.
N> nbk () hackindex org
N> Alea Hackta Est
N> ------------------------------------------------
N> http://www.hackindex.org
N> http://nbk.hackindex.org
N> http://hello.to/NBK
N> ________________________
N> Administrador Lista HackIndex:
N> hackindex-alta () eListas net
N> Administrador Lista CrackIndex:
N> crackindex-alta () eListas net
N> -----------------------------------------
N> And now.....the bug:
N>          We die.
N> -----------------------------------------



Current thread: