OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Windows .ANI LoadAniIcon Stack Overflow

From: Alexander Sotirov (asotirovdetermina.com)
Date: Tue Apr 03 2007 - 00:16:11 CDT


Larry Seltzer wrote:
>>> I just posted a video of exploiting IE7 and Firefox on Vista.
>
> The Firefox docs say that it doesn't support .ani files for cursors. How
> are you exploiting it?

I'll wait until the patch is out before I publish the technique. As far as I
know there are no public ANI exploits for Firefox yet.

Alex

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/