[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] MSIE7 browser entrapment vulnerability (probably Firefox, too)

To: "Michal Zalewski" <lcamtuf@xxxxxxxxxxxx>
Subject: Re: [Full-disclosure] MSIE7 browser entrapment vulnerability (probably Firefox, too)
From: "Jeffrey Katz" <jdkatz23@xxxxxxxxx>
Date: Fri, 23 Feb 2007 10:05:30 -0800

Just checked on IE 7.0.5730.11 -- doesn't exhibit problem.
On Firefox 2.0.0.2 -- first blank page, then, if reloaded, your
"trapped in a wormhole" page.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] MSIE7 browser entrapment vulnerability (probably Firefox, too)
  - From: Michal Zalewski

References:
- [Full-disclosure] MSIE7 browser entrapment vulnerability (probably Firefox, too)
  - From: Michal Zalewski

Prev by Date: Re: [Full-disclosure] Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability
Next by Date: [Full-disclosure] New release: "OWASP TESTING GUIDE 2007"
Previous by thread: [Full-disclosure] Firefox: onUnload tailgating (MSIE7 entrapment bug variant)
Next by thread: Re: [Full-disclosure] MSIE7 browser entrapment vulnerability (probably Firefox, too)
Index(es):
- Date
- Thread