IE7 Remote File Access
Just a quick post to draw attention to Ronald's excellent article at http://www.0x000000.com/?i=525 where he has pulled off a very interesting remote file access in IE7. The attack works by including an invalid DTD on an XML file which then streams the content of the requested file in its error message.
Use IE7? Be afraid.
IE7 Remote File Access was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on March 05, 2008.
Files
10.59348_hg838-dqx47.pdf
Files
(95.2 kB)
| Name | Size | Download all |
|---|---|---|
|
md5:ce67cc8e4340337ea119d31c61cc0c11
|
95.2 kB | Preview Download |
Additional details
Description
Just a quick post to draw attention to Ronald's excellent article at http://www.0x000000.com/?i=525 where he has pulled off a very interesting remote file access in IE7. The attack works by including an invalid DTD on an XML file which then streams the content of the requested file in its error message. Use IE7? Be afraid. IE7 Remote File Access was originally published by Martin Paul Eve at eve.gd: Martin Paul Eve on March 05, 2008.
Identifiers
- GUID
- https://doi.org/10.59348/hg838-dqx47
- URL
- https://eve.gd/2008/03/05/ie7-remote-file-access/
Dates
- Issued
-
2008-03-05T00:00:00Z
- Updated
-
2008-03-05T07:41:57Z