Full Disclosure mailing list archives
RE: IE exploit runs code from graphics?
From: "Larry Seltzer" <larry () larryseltzer com>
Date: Thu, 24 Jun 2004 22:12:31 -0400
Without having access to any of the information as to what web pages NetSec thinks is
involved,
but having seen many recent posts about the so-called "RFI - Russian IIS Hacks" I'd
suggest
that both reports are referring to one and the same, or at least, very closely
related, things.
... That is hardly the same thing as "embedded code hidden in graphics on Web pages"...
Yup, once I saw the SANS writeups I came to the same conclusion. So there's nothing really new in the client-side exploit and what's happening on the server hasn't been figured out yet, right? And it sounds like if you're up to date on patches and antivirus you're probably protected against the client-side exploit. Larry Seltzer _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: New malware to infect IIS and from there jump to clients, (continued)
- Re: New malware to infect IIS and from there jump to clients Gary Flynn (Jun 25)
- RE: New malware to infect IIS and from there jump to clients joe (Jun 25)
- Re: New malware to infect IIS and from there jump to clients insecure (Jun 25)
- Re: New malware to infect IIS and from there jump to clients Matt Power (Jun 27)
- Re: Evidence of a ISC being hacked? VX Dude (Jun 24)
- Re: Evidence of a ISC being hacked? Valdis . Kletnieks (Jun 25)
- IE exploit runs code from graphics? Larry Seltzer (Jun 24)
- RE: IE exploit runs code from graphics? Heather M. Guse Bryan (Jun 24)
- Re: IE exploit runs code from graphics? Nick FitzGerald (Jun 24)
- RE: IE exploit runs code from graphics? Larry Seltzer (Jun 24)
- Re: IE exploit runs code from graphics? Aditya, ALD [ Aditya Lalit Deshmukh ] (Jun 26)
- Re: IE exploit runs code from graphics? Jimmy Mitchener (Jun 26)
- Re: IE exploit runs code from graphics? st3ng4h (Jun 26)
- Re: IE exploit runs code from graphics? Valdis . Kletnieks (Jun 28)