[funsec] How do you load a .ANI from a web page?

Richard M. Smith rms at computerbytesman.com
Sat Mar 31 17:57:21 CDT 2007


Has anyone tried referencing a .ANI file in an <IMG> tag?
 
Richard

  _____  

From: funsec-bounces at linuxbox.org [mailto:funsec-bounces at linuxbox.org] On
Behalf Of Larry Seltzer
Sent: Saturday, March 31, 2007 5:15 PM
To: funsec at linuxbox.org
Subject: [funsec] How do you load a .ANI from a web page?


I keep hearing that the .ANI vulnerability can be invoked just by viewing a
web page.
 
How do you load a .ANI file from a web page?
 
Related question: I keep hearing that you can be exploited from plain text
mail. How the hell is this possible, or is it just a matter of web links and
file attachments?
 
Larry Seltzer
eWEEK.com Security Center Editor
 <blocked::http://security.eweek.com/> http://security.eweek.com/
http://blog.eweek.com/blogs/larry%5Fseltzer/
<http://blog.eweek.com/blogs/larry_seltzer/>
<http://blog.ziffdavis.com/seltzer> 
Contributing Editor, PC Magazine
larryseltzer at ziffdavis.com 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://linuxbox.org/pipermail/funsec/attachments/20070331/55688b68/attachment.html


More information about the funsec mailing list