[26931] in bugtraq

home help back first fref pref prev next nref lref last post

MSIEv6 % encoding - Konqueror 3.0.3 also vulnerable

daemon@ATHENA.MIT.EDU (Piotr =?iso-8859-2?q?Paw=B3ow?=)
Fri Sep 6 15:34:54 2002

Content-Type: text/plain;
  charset="iso-8859-2"
From: Piotr =?iso-8859-2?q?Paw=B3ow?= <pp@siedziba.pl>
To: bugtraq@securityfocus.com
Date: Fri, 6 Sep 2002 16:25:47 +0200
In-Reply-To: <20020903124920.32103.qmail@mail.securityfocus.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Message-Id: <200209061625.47296@siedziba.pl>

Hello,

Test page for Konqueror is at:
http://pp.siedziba.pl/2f/

I have also tested it with Mozilla 1.0 (Gecko/20020829) and Galeon 1.2.5 
(Gecko/20020606) and found not vulnerable - the script throws "Permission 
denied to get property HTMLDocument.body" exception.

-- 
 Piotr Pawłow
 mailto:pp@siedziba.pl

home help back first fref pref prev next nref lref last post