[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous

To: "Jim Manico" <jim@xxxxxxxxxx>
Subject: Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
From: "M.B.Jr." <marcio.barbado@xxxxxxxxx>
Date: Mon, 8 Jan 2007 11:28:03 -0200

On 1/3/07, Jim Manico <jim@xxxxxxxxxx> wrote:
> I'm most worried about the CSRF vector.

how come?

this is client-side stuff.

-- 
Marcio Barbado, Jr.
==============
==============

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  - From: Jim Manico

References:
- [Full-disclosure] Universal XSS with PDF files: highly dangerous
  - From: pdp (architect)
- Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  - From: Jean-Jacques Halans
- Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  - From: Jim Manico

Prev by Date: [Full-disclosure] TK53 Advisory #1: CenterICQ remote DoS buffer overflow in LiveJournal handling
Next by Date: Re: [Full-disclosure] Perforce client: security hole by design
Previous by thread: Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
Next by thread: Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
Index(es):
- Date
- Thread