|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
AIM Local File Display in Notification Window
shell
dotshell.net
Date: Fri Sep 14 2007 - 10:51:33 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Upon further exploration of our previous bug, I discovered that the
rendered HTML was even capable of displaying local files. Specifically,
<img src="C:/WINDOWS/Zapotec.bmp"> was able to display the file from the
Windows directory without question. We further experimented with this and
tried including large files from the windows directory (ex. shell32.dll)
as scripts (ex. <script src=...) in attempt to overflow the buffer.
However, these attempts yielded no success.
Discovery credited to:
Shell ( dotshell.net, shell6gmail.com, shelldotshell.net)
Lone (Lone-Matrix.com, LoneLone-Matrix.com)
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]