Bugtraq mailing list archives
AIM Local File Display in Notification Window
From: shell () dotshell net
Date: Fri, 14 Sep 2007 10:51:33 -0500 (CDT)
Upon further exploration of our previous bug, I discovered that the rendered HTML was even capable of displaying local files. Specifically, <img src="C:/WINDOWS/Zapotec.bmp"> was able to display the file from the Windows directory without question. We further experimented with this and tried including large files from the windows directory (ex. shell32.dll) as scripts (ex. <script src=...) in attempt to overflow the buffer. However, these attempts yielded no success. Discovery credited to: Shell ( dotshell.net, shell6 () gmail com, shell () dotshell net) Lone (Lone-Matrix.com, Lone () Lone-Matrix com)
Current thread:
- AIM Local File Display in Notification Window shell (Sep 14)