Re: IE5 allows executing programs

Haxor, Wikit (broodahsZERG.COM)
Thu, 16 Sep 1999 12:56:30 -0700

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Brock Tellier: "Two SuSE 6.2 local root exploits"
• Previous message: Bob: "ASUS mother board security question..."

another twist on this ie5 exploit

Mplayer (mplayer.com) offers a service where players can find other players
to play games. With a Plus (pay) account, you can force users to view a url
when entering a game lobby. Just have them look at a page with the ie5
exploit and boom... they have no choice when they enter the game lobby but
to get the exploit. mplayer uses the ie browser ocx's so if you have ie5
then you will be exploited. or add in the ie5 java boxes to ask for
username/password and you get a plus account...... for free. just a little
more mayhem to cause and more reason for a patch to be released

• Next message: Brock Tellier: "Two SuSE 6.2 local root exploits"
• Previous message: Bob: "ASUS mother board security question..."

This archive was generated by hypermail 2.0b3 on Thu Sep 16 1999 - 19:24:28 CDT