Other nomination

Safari pwns Internet Explorer

Aviv Raff · aviv.raffon.net

Chains Nitesh Dhanjani's Safari-for-Windows Carpet Bomb — silent drive-by download of arbitrary files to the desktop, which Apple declined to treat as a bug — with an older unpatched IE file-loading flaw to reach code execution on Windows. Microsoft issued advisory 953818; details withheld pending a patch. Changing Safari's download folder is explicitly not sufficient.

Record

Researcher

Aviv Raff

Published by

aviv.raffon.net

In the archive

• Nominated for the 2008 Top 10 Web Hacking Techniques

Tags

• attack-chain
• rce
• vendor-advisory
• mitigation
• case-study

This page is the archive's own catalogue record. The research is the work of Aviv Raff, first published at the original source. Preserved copies are kept so the citation survives its host.