[37797] in bugtraq
Internet Explorer Code Execution Bypass Vulnerability
daemon@ATHENA.MIT.EDU (aikon none)
Fri Dec 17 19:58:33 2004
Date: 17 Dec 2004 17:03:37 -0000
Message-ID: <20041217170337.26668.qmail@www.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: aikon none <aikon.bcn@gmail.com>
To: bugtraq@securityfocus.com
Last week I discovered a vulnerability to avoid/overrun/bypass the new protection for Local JS Execution on IE (winxp sp2)
--cut here--
<script>
window.alert("Example Exploit");
</script>
--cut here--
(Copy and paste into your Notepad and save it as EXAMPLE.HTM)
If you open EXAMPLE.HTM, your IE blocks this code and shows a yellow bar over the webpag.
But I discovered a vulnerability to allow Local JS Code to execute on IE, the exploit is:
"Go to Control Panel / Display Config and set as the desktop background the example webpage (EXAMPLE.HTM), once this is done, the code will be executed without showing any warning in IE"
----------------------
My Webpag: www.madantrax.cjb.net
My ClanWeb: www.darknessteam.com
ForumClan: foro.darknessteam.com
