[Full-disclosure] Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability

Michal Zalewski lcamtuf at dione.ids.pl
Fri Feb 23 21:59:35 GMT 2007


On Fri, 23 Feb 2007, Stefan Esser wrote:

> Proof of Concept:
>
>    The Hardened-PHP Project is not going to release a proof of concept
>    exploit for this vulnerability.

...because pretty much no exploit is needed. Scary. Good catch.

/mz




Full-Disclosure is hosted and sponsored by Secunia.