Re: [Full-disclosure] Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability

["pdp (architect)" <pdp.gnucitizen@xxxxxxxxxxxxxx>]

indeed

On 2/23/07, Michal Zalewski <lcamtuf@xxxxxxxxxxxx> wrote:
> On Fri, 23 Feb 2007, Stefan Esser wrote:
>
> > Proof of Concept:
> >
> >    The Hardened-PHP Project is not going to release a proof of concept
> >    exploit for this vulnerability.
>
> ...because pretty much no exploit is needed. Scary. Good catch.
>
> /mz
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>


-- 
pdp (architect) | petko d. petkov
http://www.gnucitizen.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/