[35680] in bugtraq

home help back first fref pref prev next nref lref last post

RE: MSIE Download Window Filename + Filetype Spoofing Vulnerability

daemon@ATHENA.MIT.EDU (Polazzo Justin)
Tue Jul 13 11:34:23 2004

content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Date: Mon, 12 Jul 2004 15:21:56 -0400
Message-ID: <FEBC66CCD411744381228574BAB53A9B45AA9F@MAIL.fac.gatech.edu>
From: "Polazzo Justin" <Justin.Polazzo@facilities.gatech.edu>
To: "Drew Copley" <dcopley@eEye.com>
Cc: <bugtraq@securityfocus.com>
Content-Transfer-Encoding: 8bit

Should you not be able to tile your gui any way you please? 

Someone may be thinking that you could put an image in front of the security box in order to trick users into clicking on "open" without knowledge. I noticed that you cant click on the buttons when the image is in front of them.

Would you be able to have an insane speed at which the object moves over the buttons, or a  pulse action to where the image would appear to be solid, but would still select "open" when pressed?

jp

-----Original Message-----
From: Drew Copley [mailto:dcopley@eEye.com]

home help back first fref pref prev next nref lref last post