ignorance isn't always an option

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 4 of 4

Files from Juan Carlos Garcia Cuartango

microsoft-install.txt

Posted Feb 23, 2000

Authored by Juan Carlos Garcia Cuartango

An ActiveX control shipped with IE can be used to install software components signed by Microsoft without prompting the user. This of course raises trust issues. Someone, not necessarily Microsoft, could use this control to install a Microsoft signed component in your system.

tags | exploit, activex

MD5 | a6f230dc95b98b2d73a0f82f61dfe607

Download | Favorite | Comments (0)

cuartangojc-clipboard-msie.txt

Posted Aug 17, 1999

Authored by Juan Carlos Garcia Cuartango

MSIE 4 Privacy Issue: clipboard content can be made public by a javascript code two lines long. Exploit code included.

tags | exploit, javascript

MD5 | 7154c397ae28f144018828ec5c3b509d

Download | Favorite | Comments (0)

msie.5.dhtml.cuartango.txt

Posted Aug 17, 1999

Authored by Juan Carlos Garcia Cuartango

More Microsoft Internet Explorer 5 vulnerabilities! Microsoft Active X control called "DHTML Edit control Safe for Scripting for IE 5" contains security holes that allow public access to the clipboard and cross-frame access, among other things. Exploit code examples included.

tags | exploit, vulnerability, activex

MD5 | e2fe2708e182aa7971209fcbccc5c672

Download | Favorite | Comments (0)

ie4.clipboard.txt

Posted Aug 17, 1999

Authored by Juan Carlos Garcia Cuartango

Microsoft Internet Explorer 4.x vulnerability in ActiveX object allows remote attacker to obtain local user's clipboard content with simple JavaScript code.

tags | exploit, remote, local, javascript, activex

MD5 | 85b661435c175c23f16f53239f19302b

Download | Favorite | Comments (0)