Re: [Simple] <note> in IMDN

["Hisham Khartabil" <hisham.khartabil at gmail.com>]

On 21/05/2008, Dean Willis <dean.willis at softarmor.com> wrote:
>
> On May 13, 2008, at 11:38 PM, Hisham Khartabil wrote:
>
> > Can you explain how it is an attack vector?
> >
>
>
> Unconstrained rich content is one of the most easily exploited attack
> vectors.

How is this different from every other header or part of an XML body
in SIP, MSRP, IMPP or any other protocol that allows text to be
entered in a field? Why is this particular <note> giving people grief?

>
> Buffer overrun attacks as well as all of the typical MIME compound-component
> attacks are likely. For example, the common JPEG vulnerabilities might be
> exploitable:
>
> http://www.news.com/Image-virus-spreads-via-chat/2100-7349_3-5390463.html
>
>
> Or the content-execution weakness that caused the Macintosh Safari browse to
> be most easily exploited in recent hacking contests:
>
> http://www.engadget.com/2007/07/23/safari-exploit-gives-hackers-full-control-of-your-iphone/
>
>
> There have also been exploits against QuickTime, Flash, and most other
> plugin components from time to time.
>
> --
> Dean
>
_______________________________________________
Simple mailing list
Simple at ietf.org
https://www.ietf.org/mailman/listinfo/simple