[framework] ANI on Vista

H D Moore hdm at metasploit.com
Mon Apr 2 20:37:40 CDT 2007


Whats the trick for exploiting it on Firefox? I tried the obvious things 
(favicon.ico, Cursor CSS, etc).

-HD

On Monday 02 April 2007 20:00, Alexander Sotirov wrote:
> I made a flash video of my ANI exploit for IE7 and Firefox on Vista.
> It's interesting that the protected mode of IE does not stop the
> execution of cmd.exe, but it does prevent you from writing to the file
> system once you get the shell.
>
> http://determina.blogspot.com/
>
> Alex



More information about the framework mailing list