RE: [Full-Disclosure] Re: Internet Explorer URL parsing vulnerability

["Funk Jr, Joseph C." <jcfunkjr@co.bucks.pa.us>]

Works fine for me same version IE6.0.2800.1106.xpsp2.  Sends me to 
https://paypal.com  Although I did notice that the <button> seems to be a 
requirement for this vulnerability to work, as using a plain hyperlink <a href> 
fails for me.

-joe-

-----Original Message-----
From: Rui Pereira [mailto:ruiper@shaw.ca]
Sent: Wednesday, December 10, 2003 12:13 PM
To: 'Exibar'
Cc: full-disclosure@lists.netsys.com
Subject: RE: [Full-Disclosure] Re: Internet Explorer URL parsing
vulnerability


Er, on IE6.0.2800.1106.xpsp2....this shows up as
https://www.let_me_steal_your_money.com/ in the address line. Guess it
don't work as advertised. Maybe we should all upgrade? ;) 

R

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html