IE5.5 window.externalNavigateAndFind security vulnerability....

Multiple security vulnerabilities found in window.external.NavigateAndFind function in IE5.5... After the most recent patches applied the vulnerabilities seem to persist.. Actually there is no current issues discussed at microsft website... Microsoft has been notified about the problem via email...

Очередная дырка в Internet Explorer/Outlook

Вызов GetObject позволяет обратиться к любому локальному файлу. SCRIPT alert"This script reads C:TEST.TXTnYou may need to create it"; a=GetObject"c:test.txt","htmlfile"; setTimeout"alerta.body.innerText;",2000; /SCRIPT...

Заткнуты дырки в IE (Scriptlet Rendering, IE Script)

Несколько дырок позволявших выполнять скрипты в контексте локальной машины и обращаться к локальным файлам...

Очередная дырка javascript в IE

Сочетание метода navigate с IFRAME позволяет обратиться к локальным файлам. IFRAME ID="I1"/IFRAME SCRIPT for=I1 event="NavigateComplete2b" alert"Here is your file:n"+b.document.body.innerText; /SCRIPT SCRIPT I1.navigate"file://c:/test.txt"; setTimeout'I1.navigate"file://c:/test.txt"',1000; /SCRIP...

Microsoft Internet Explorer 4.05.05.5 preview5.0.1 - DocumentComplete() Cross Frame Access

Microsoft Internet Explorer 4.05.05.5 preview5.0.1 - DocumentComplete Cross Frame Access source: https://www.securityfocus.com/bid/1224/info The DocumentComplete function in IE does not properly validate origin domains. Therefore it is possible for a remote webserver to gain read access to local...

Очередная уязвимость между фреймами в IE

Используя JAVA-апплет можно выполнить JAVASCRIPT в контексте локального документа, таким образом можно получить доступ к локальному файлу...

Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading

// source: https://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.htm does not sufficiently validate input. A problem with...

CVE-2000-0019

IMail POP3 daemon uses weak encryption, which allows local users to read files...

Microsoft Virtual Machine 2000 - Series3000 Series getSystemResource

Microsoft Virtual Machine 2000 - Series3000 Series getSystemResource source: https://www.securityfocus.com/bid/957/info Microsoft's Java Virtual Machine will allow the reading of local file information by a remote Java application. This can be done two ways: 1: Via the getSystemResourceAsStream...

CVE-1999-0981

CVE-1999-0981 affects Internet Explorer 5.01 and earlier. A remote attacker can create a reference to a client window and use a server-side redirect to access local files via that window (Server-side Page Reference Redirect). Documents confirm the vulnerability description; no exploitation detail...

ie50.xml.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...

Microsoft Internet Explorer 45 Outlook 98 - window.open Redirect

Microsoft Internet Explorer 45 Outlook 98 - window.open Redirect Microsoft Internet Explorer 4.0 for Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4,Outlook 98 0 window.open Redirect Vulnerability source: https://www.securityfocus.com/bid/766/info...

ie.50.redirection.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...

ie5.javascript.redirect.txt

IE 5.0 allows reading local and from any domain files and window spoofing using HTTP redirection to "javascript:" Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is n...

IE5_IFRAME_vuln.txt

IE 5.0 security vulnerability - reading local and from any domain, probably window spoofing is possible files using IFRAME and document.execCommand Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially...

Microsoft Internet Explorer 5.04.0.1 - iFrame

Microsoft Internet Explorer 5.04.0.1 - iFrame Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 IFRAME Vulnerability source: https://www.securityfocus.com/bid/696/info Internet Explorer 5 will allow a...

Microsoft Internet Explorer 5.0/4.0.1 - iFrame

Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 IFRAME Vulnerability source: https://www.securityfocus.com/bid/696/info Internet Explorer 5 will allow a malicious web page to read the contents of...

Microsoft Internet Explorer 5 - Download Behaviour

Microsoft Internet Explorer 5 - Download Behaviour Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web...

Microsoft Internet Explorer 5 - Download Behaviour

Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web site operator to read files on an IE5 client...

msie4-autoexec.bat-tdc.txt

Guninski's IE 4 reading AUTOEXEC.BAT. There is a bug in Internet Explorer 4.x patched which allows reading local files and sending them to an arbitrary server. The problem is: if you add '%01someURL' after the an about: URL, IE thinks that the document is loaded from the domain of 'someURL'. This...