Thank you for the challenge, Geo. Your trying to get the discussion in
a direction that doesn't serve the purpose of the finding, nor would
it "proof" anything. I welcome your task though I'd like you to know
that I don't think I have to proof anything to you. However if you pay
enough I might invest some time ;)
Again Geo, NOBODY has said that this is a vulnerability OF IE7 ITSELF we said
the handler that IE7 installs is broken. I honestly think we have
discussed the problem itself enough, it's up to Microsoft now to
either rethink their position or just hold on to their position.
Thank you for the challenge, Geo. Your trying to get the discussion in
a direction that doesn't serve the purpose of the finding, nor would
it "proof" anything. I welcome your task though I'd like you to know
that I don't think I have to proof anything to you. However if you pay
enough I might invest some time ;)
Again Geo, NOBODY has said that this is a vulnerability OF IE7 ITSELF we said
the handler that IE7 installs is broken. I honestly think we have
discussed the problem itself enough, it's up to Microsoft now to
either rethink their position or just hold on to their position.
PS [1] :
http:%xx../../../../../../../../../windows/system32/calc.exe".cmd
[1]
http://www.heise.de/security/news/meldung/96921/URI-Problem-zieht-weiter
e-Kreise-Acrobat-Reader-und-Netscape-anfaellig-2-Update
--
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7
[ reply ]