Vulnerability Development mailing list archives
Re: Re: GDI+ and Internet Explorer question
From: gljuposti () gmail com
Date: 12 Jun 2007 13:33:43 -0000
Thanks! Nice trick with renaming to metafile. Though I noticed it doesn't work with most image formats (for example bmp, gif and jpg are also opened in IE after renaming). Is there also a way to force these to be opened with GDI+ remotely? Another question, does anyone know if IE image decoders use some standard components? For example, does it use IJG JPEG library for JPEG format, libpng for PNG format or something similar? Or new decoders were written for IE only?
IE has its own image decoders for many image types (jpeg, ico, etc). You can trigger this bug remotely by renaming your .ico to .emf or .wmf, which forces it be opened by the Picture and Fax Viewer using GDI+.
Current thread:
- GDI+ and Internet Explorer question gljuposti (Jun 10)
- Re: GDI+ and Internet Explorer question H D Moore (Jun 11)
- <Possible follow-ups>
- Re: Re: GDI+ and Internet Explorer question gljuposti (Jun 12)