[Full-Disclosure] RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2

2004-10-20 Thread Thor Larholm
I successfully reproduced this exploit on a fully patched XPSP2 installation and can verify that malware.htm is planted locally after which HTML Help is used to launch it and circumvent the XPSP2 browser security improvements, compromising the system. However, this exploit did not work on any

Re: [Full-Disclosure] RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2

2004-10-20 Thread Maarten
On Wednesday 20 October 2004 17:07, Thor Larholm wrote: I successfully reproduced this exploit on a fully patched XPSP2 installation and can verify that malware.htm is planted locally after which HTML Help is used to launch it and circumvent the XPSP2 browser security improvements,

RE: [Full-Disclosure] RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2

2004-10-20 Thread Thor Larholm
From: Maarten [mailto:[EMAIL PROTECTED] http://www.pivx.com/qwikfixDownload.asp No it is not, at least not before you fix your broken downloadform. Hitting submit does nothing at all. (You're not seriously telling us that you need MSIE to download qwikfix, or do you ?!) I just filled

Re: [Full-Disclosure] RE: How to Break Windows XP SP2 + Internet Explorer 6 SP2

2004-10-20 Thread KF_lists
Not sure what your problem is but it works fine for me on Suse and Firefox... -KF No it is not, at least not before you fix your broken downloadform. Hitting submit does nothing at all. (You're not seriously telling us that you need MSIE to download qwikfix, or do you ?!) a disappointed