playing for fun with <=IE7

playing for fun with =IE7 Impact: who knows ... Fix Available: no ------------------------------------------------------- 1 Bug 2 Proof of concept 3Conclusion ====== 1 Bug ====== it's possible to bypass the extension filter of =IE7 this can result by downloading an arbitrary exe file ===== 2proof...

CVE-2007-5456: Improper Control of Generation of Code

Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a '?' question mark followed by a non-.exe filename after the .exe filename, as demonstrated by 1 .txt, 2 .cda, 3 .log, 4 .dif...