6230 matches found
msie.5.0-0.001.percent.txt
Date: Fri, 9 Apr 1999 07:15:12 +0300 From: Georgi Guninski To: [email protected] Subject: IE 5.0 security vulnerabilities - %01 bug again There is a security bug in Internet Explorer 5.0 which circumvents "Cross-frame security" and opens several security holes. This is a modification of the "%...
msie4.01-jscript-security.txt
Date: Thu, 28 Jan 1999 04:53:31 PST From: Georgi Guninski To: [email protected] Subject: Javascript %01 bug in Internet Explorer There is a Javascript security bug in Internet Explorer 4.x patched, which circumvents "Cross-frame security" and opens several security holes. The probl...
msie4.01-window-spoof.txt
Guninski's IE 4 window spoofing. http://www.geocities.com/ResearchTriangle/1711/read4.html There is a bug in Internet Explorer 4.01 patched which allows "window spoofing". The problem is: if you add '%01someURL' after the URL, IE thinks that the document is loaded from the domain of 'someURL'. Th...
netscape.window.spoof.txt
Date: Tue, 16 Feb 1999 09:46:05 PST From: Georgi Guninski To: [email protected] Subject: Netscape Communicator window spoofing bug There is a bug in Netscape Communicator 3.04,4.06,4.5 Win95 and 4.08 WinNT, which allows "window spoofing". After visiting a hostile page or clicking a hostile lin...
netscape.4.51.javascript.txt
Date: Tue, 16 Mar 1999 11:09:41 PST From: Georgi Guninski To: [email protected] Subject: Re: Netscape upgrade FYI... Netscape has released version 4.51 of Communicator. It seems to fix the window spoofing bug http://www.geek-girl.com/bugtraq/19991/0747.html , along with the javascript bugs tha...
CVE-1999-0469
Internet Explorer 5.0 allows window spoofing, allowing a remote attacker to spoof a legitimate web site and capture information from the client...
PT-1999-1150 · Microsoft · Internet Explorer
Name of the Vulnerable Software and Affected Versions: Internet Explorer version 5.0 Description: The issue allows a remote attacker to spoof a legitimate web site, enabling them to capture information from the client through window spoofing. Recommendations: For Internet Explorer version 5.0,...
Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access
source: https://www.securityfocus.com/bid/197/info On January 28, 1999, Georgi Guninski originally reported a vulnerability in Internet Explorer 4.x. Internet Explorer 4.x's implentation of Cross-frame security could be bypassed if "%01" is appended to an arbitrary URL. If the specially malformed...
