RE: Secunia Reports Another IE7 Flaw

[Larry Seltzer <Larry () larryseltzer com>]

> > The Secunia demo didn't really work for me.  I've configured IE7 to
generate pop-ups as new tabs and the address bar has different
dimensions than their demo is expecting. 

Of course that's not the default. I tried it and the exploit seems to
depend on the exact layout of the window, and the "fake" address was
scrolled off some to the left. It's something, but not much.

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.eweek.com/blogs/larry%5Fseltzer/
Contributing Editor, PC Magazine
larryseltzer () ziffdavis com 

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.