OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability

From: pdp (architect) (pdp.gnucitizengooglemail.com)
Date: Fri Feb 23 2007 - 16:38:13 CST

indeed

On 2/23/07, Michal Zalewski <lcamtufdione.ids.pl> wrote:
> On Fri, 23 Feb 2007, Stefan Esser wrote:
>
> > Proof of Concept:
> >
> > The Hardened-PHP Project is not going to release a proof of concept
> > exploit for this vulnerability.
>
> ...because pretty much no exploit is needed. Scary. Good catch.
>
> /mz
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

--
pdp (architect) | petko d. petkov
http://www.gnucitizen.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/