SecurityFocus

IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 Oct 26 2006 05:42PM
LIUDIEYU dot COM (liudieyu com gmail com) (2 replies)

Re: IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 Oct 27 2006 05:14PM
Reversemode (advisories reversemode com)

Re: [Full-disclosure] IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 Oct 27 2006 10:35AM
HASEGAWA Yosuke (yosuke hasegawa gmail com)

Hi.

On 10/27/06, LIUDIEYU dot COM <liudieyu.com (at) gmail (dot) com [email concealed]> wrote:
> Upon IE7 release, Secunia published SA22477 titled `Internet Explorer
> 7 "mhtml:" Redirection Information Disclosure`.

It seems to be able to make redirecting with mhtml fail by returning
the response by 201 or 202.
There for, It is possible for this to prevent trying to steal the
contents of your server via mhtml redirection.

--
HASEGAWA Yosuke
yosuke.hasegawa (at) gmail (dot) com [email concealed]

[ reply ]