Re: [Simple] <note> in IMDN

[Dean Willis <dean.willis at softarmor.com>]

On May 13, 2008, at 11:38 PM, Hisham Khartabil wrote:

> Can you explain how it is an attack vector?


Unconstrained rich content is one of the most easily exploited attack  
vectors.

Buffer overrun attacks as well as all of the typical MIME compound- 
component attacks are likely. For example, the common JPEG  
vulnerabilities might be exploitable:

http://www.news.com/Image-virus-spreads-via-chat/2100-7349_3-5390463.html


Or the content-execution weakness that caused the Macintosh Safari  
browse to be most easily exploited in recent hacking contests:

http://www.engadget.com/2007/07/23/safari-exploit-gives-hackers-full-control-of-your-iphone/


There have also been exploits against QuickTime, Flash, and most other  
plugin components from time to time.

--
Dean
_______________________________________________
Simple mailing list
Simple at ietf.org
https://www.ietf.org/mailman/listinfo/simple