Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: GoogleToolbar:About -- Allows Script Injection Sep 18 2004 05:31PM
Rafel Ivgi, The-Insider (theinsider 012 net il)
This is not dangerous from remote, because the "res:" protocol is not
accessible by internet zone. You must to find a way to access "res:" from
remote, otherwise it means nothing. As for local zone, you can ran scripts
in mycomputer zone.

Rafel Ivgi, The-Insider
Security Consultant, Finjan.com

-...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus