[转载]IE代码执行绕过漏洞

信息来源：bugtraq@securityfocus.com

Internet Explorer Code Execution Bypass Vulnerability
('binary' encoding is not supported, stored as-is)

Last week I discovered a vulnerability to avoid/overrun/bypass the new protection for Local JS Execution on IE (winxp sp2)


--cut here--


<script>
window.alert("Example Exploit");
</script>


--cut here--


(Copy and paste into your Notepad and save it as EXAMPLE.HTM)


If you open EXAMPLE.HTM, your IE blocks this code and shows a yellow bar over the webpag.


But I discovered a vulnerability to allow Local JS Code to execute on IE, the exploit is:


"Go to Control Panel / Display Config and set as the desktop background the example webpage (EXAMPLE.HTM), once this is done, the code will be executed without showing any warning in IE"


----------------------


My Webpag: www.madantrax.cjb.net
My ClanWeb: www.darknessteam.com
ForumClan: foro.darknessteam.com