Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: Paul Szabo (pszmaths.usyd.edu.au)
Date: Wed Jul 18 2007 - 06:25:18 CDT
I sent the following to CERT (a few hours ago, no reply yet):
> In http://www.kb.cert.org/vuls/id/786920 you wrote:
> Disabling the AIM protocol handler will mitigate this vulnerability.
> To unregister the protocol handlers, delete or rename the following
> registry keys:
> I believe that renaming that key does NOT unregister the handler.
> Windows looks for registry values of "URL Protocol" (almost?) anywhere
> within the registry, not just (directly) under HKCR. And anyway, how
> would renaming AOL to XYZ affect the AIM handler...
Now I wonder if they can in fact be right... please enlighten me.
Paul Szabo pszmaths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/