[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: IE7 website security certificate discrediting exploit
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: IE7 website security certificate discrediting exploit
- From: inge_eivind.henriksen@xxxxxxxxx
- Date: 7 Nov 2006 19:00:32 -0000
There is a similar bug with ieframe-dll's sslnavcancel.htm. I also found that
if you use ieframe.dll's http_410.htm you can make a link that says "The
webpage no longer exists" with a spoof'ed address. POC's is at my blog as
comments to the original article.