there have always been these vluns<br><br><div><span class="gmail_quote">On 10/6/07, <b class="gmail_sendername">Geo.</b> <<a href="mailto:geoincidents@nls.net">geoincidents@nls.net</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
----- Original Message -----<br>From: "Thierry Zoller" <<a href="mailto:Thierry@Zoller.lu">Thierry@Zoller.lu</a>><br><br>> The user clicks on a mailto link, is that untrusted code?<br><br>Depends on where the link comes from. If it's a shortcut on the users
<br>desktop no it's not untrusted, if it's in a PDF file you received in your<br>email then yes it's untrusted.<br><br>> Anyways, the mailto link<br>> POST IE7 has a flaw/threat/vulnerablity it hasn't had PRE IE7.
<br><br>> The problem here is the root cause, the root cause is that IE7<br><br>Ok I'm game, so then show me this exploit without having Acrobat on your<br>system. IE7 handles mailto links in untrusted web pages. Put the mailto link
<br>in an untrusted html page and make it work with IE7.<br><br>Geo.<br><br>_______________________________________________<br>Full-Disclosure - We believe in it.<br>Charter: <a href="http://lists.grok.org.uk/full-disclosure-charter.html">
http://lists.grok.org.uk/full-disclosure-charter.html</a><br>Hosted and sponsored by Secunia - <a href="http://secunia.com/">http://secunia.com/</a><br></blockquote></div><br><br clear="all"><br>-- <br><a href="http://www.goldwatches.com/mens/cufflinks.html">
http://www.goldwatches.com/mens/cufflinks.html</a><br><a href="http://www.jewelerslounge.com">http://www.jewelerslounge.com</a>