Re: .MHT Buffer Overflow in Internet Explorer

2003-03-12 Thread Thor Larholm
> From: "jelmer" <[EMAIL PROTECTED]> > I believe from ie6 SP1 on IE doesn't open any mht files directly from the > web anymore. > from the local filesystem it still works though. That's the funny thing, IE6 SP1 still allows opening MHT files directly from the web in the Internet Zone, so this is r

Re: .MHT Buffer Overflow in Internet Explorer

2003-03-11 Thread Jouko Pynnonen
On 10 Mar 2003, Tom Tanaka wrote: > CANON SYSTEM SOLUTIONS INC. Security Alert > > VULNERABILITY:.MHT Buffer Overflow in Internet Explorer > > DATE FOUND:March 2, 2003 > > Severity:High Risk(code can be executed remotely) [snip] > The following error will occu

Re: .MHT Buffer Overflow in Internet Explorer

2003-03-11 Thread jelmer
bject: .MHT Buffer Overflow in Internet Explorer > > > CANON SYSTEM SOLUTIONS INC. Security Alert > > VULNERABILITY:.MHT Buffer Overflow in Internet Explorer > > DATE FOUND:March 2, 2003 >

Re: .MHT Buffer Overflow in Internet Explorer

2003-03-11 Thread [EMAIL PROTECTED]
Excellent! Yes, there has always been something suspicious about that spot. Simply writing the word [header] GIF89a in the same spot will create an empty image container: --phuquedup.mhtml- MIME-Version: 1.0 Content-Transfer-Encoding: 7bit GIF89a --phuquedup.mhtml- E

.MHT Buffer Overflow in Internet Explorer

2003-03-11 Thread Tom Tanaka
CANON SYSTEM SOLUTIONS INC. Security Alert VULNERABILITY:.MHT Buffer Overflow in Internet Explorer DATE FOUND:March 2, 2003 Severity:High Risk(code can be executed remotely) == SUMMARY: IE5 introduced the new