Full Disclosure mailing list archives
Re: Windows .ANI LoadAniIcon Stack Overflow
From: "Larry Seltzer" <Larry () larryseltzer com>
Date: Tue, 3 Apr 2007 22:59:21 -0400
Firefox doesn't support ANI files for cursors. If the exploitation
method was so obvious, we would already have Firefox exploits in the wild, wouldn't we? I don't know. I'll have to think about how else you would get it to use an ANI. There's no Flash involved, is there?
Maybe the url should be in quites? This works for me: <body style="CURSOR: url('foo.ani')">
It's actually supposed to work with or without quotes I think and I've tried a dozen variants and yours here. No luck. The cursors are straight out of c:\windows\cursors. I'll try it in the morning. Larry Seltzer eWEEK.com Security Center Editor http://security.eweek.com/ http://blog.eweek.com/blogs/larry%5Fseltzer/ Contributing Editor, PC Magazine larryseltzer () ziffdavis com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Windows .ANI LoadAniIcon Stack Overflow, (continued)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 02)
- Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 02)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow George Ou (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow ad () heapoverflow com (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Daniel Veditz (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Alexander Sotirov (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Larry Seltzer (Apr 03)
- Re: Windows .ANI LoadAniIcon Stack Overflow Peter Ferrie (Apr 04)
- Re: Windows .ANI LoadAniIcon Stack Overflow Michal Majchrowicz (Apr 08)
- Re: Windows .ANI LoadAniIcon Stack Overflow wac (Apr 08)
- Re: Windows .ANI LoadAniIcon Stack Overflow Michal Majchrowicz (Apr 10)
- Re: Windows .ANI LoadAniIcon Stack Overflow Brooks, Shane (Apr 10)
- Re: Windows .ANI LoadAniIcon Stack Overflow Knud Erik Højgaard (Apr 10)
- Re: Windows .ANI LoadAniIcon Stack Overflow Chris Lyon (Apr 01)
- Re: Windows .ANI LoadAniIcon Stack Overflow dev code (Apr 01)