Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Browsers :: hack7786.htm

Internet Explorer Code exec. Bypass vuln



Internet Explorer Code Execution Bypass Vulnerability



Last week I discovered a vulnerability to avoid/overrun/bypass the new protection for Local JS Execution on IE (winxp sp2)



--cut here--



<script>

window.alert("Example Exploit");

</script>



--cut here--



(Copy and paste into your Notepad and save it as EXAMPLE.HTM)



If you open EXAMPLE.HTM, your IE blocks this code and shows a yellow bar over the webpag.



But I discovered a vulnerability to allow Local JS Code to execute on IE, the exploit is:



"Go to Control Panel / Display Config and set as the desktop background the example webpage (EXAMPLE.HTM), once this is done, the code will be executed without showing any warning in IE"



----------------------



My Webpag: www.madantrax.cjb.net 

My ClanWeb: www.darknessteam.com 

ForumClan:  foro.darknessteam.com


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH