[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Re: Internet Explorer URL parsing vulnerabi lity



Jim Race wrote:

http://petard.freeshell.org/ms-announce.html


Mozilla 1.5:

Displays in status bar, as well as takes user to http://www.microsoft.com

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031007

Check that. With Moz 1.5:


Opening in a new *TAB* takes one to MS. Clicking the link takes one to /. with "http://www.microsoft.com%01@slashdot.org/"; in the address bar.

That's odd.

-jim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html