BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
AIM Local File Display in Notification Window Sep 14 2007 03:51PM
shell dotshell net
Upon further exploration of our previous bug, I discovered that the
rendered HTML was even capable of displaying local files. Specifically,
<img src="C:/WINDOWS/Zapotec.bmp"> was able to display the file from the
Windows directory without question. We further experimented with this and
tried includi...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus