[Full-disclosure] Microsoft Internet explorer 8 DLL Hijacking (IESHIMS.DLL)

[YGN Ethical Hacker Group <lists@xxxxxxxx>]

I found this Microsoft Internet explorer 8 DLL Hijacking  at Inject0r db

http://inj3ct0r.com/exploits/13898

This one is a similar variant of IE 7

http://www.exploit-db.com/exploits/2929/

It can be triggered only if attackers can put a IESHIMS.DLL file in
user's desktop.

However, there are some supporting factors that trigger this exploit successful
such as when  user's default download location is Desktop

Ref:
http://aviv.raffon.net/2008/05/31/SafariPwnsInternetExplorer.aspx

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/