MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: bugtraq@securityfocus.com
Subject: MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable
From: Piotr Pawłow <pp@siedziba.pl>
Date: Fri, 6 Sep 2002 16:25:47 +0200
In-reply-to: <20020903124920.32103.qmail@mail.securityfocus.com>
References: <20020903124920.32103.qmail@mail.securityfocus.com>
User-agent: KMail/1.4.3

Hello,

Test page for Konqueror is at:
http://pp.siedziba.pl/2f/

I have also tested it with Mozilla 1.0 (Gecko/20020829) and Galeon 1.2.5 
(Gecko/20020606) and found not vulnerable - the script throws "Permission 
denied to get property HTMLDocument.body" exception.

-- 
 Piotr Pawłow
 mailto:pp@siedziba.pl

Follow-Ups:
- Re: MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable
  - From: Dirk Mueller

References:
- MSIEv6 % encoding causes a problem again
  - From: Liu Die Yu

Prev by Date: Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP
Next by Date: zero-width gif: exploit PoC for NS6.2.3 (fixed in 7.0) [Was: GIFsGood, Flash Executable Bad]
Previous by thread: Re: MSIEv6 % encoding causes a problem again
Next by thread: Re: MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux