Other nomination
Expanding the Attack Surface
Switching browsers during an unpatched IE bug does not isolate users. A PDF opened in Firefox is rendered by Adobe Reader, and one line of Reader JavaScript calling app.launchURL() hands a chosen URL to the system default browser, bouncing the victim into Internet Explorer. Safari and Opera behave the same way.
Record
- Researcher
- xssniper
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of xssniper, first published at the original source. Preserved copies are kept so the citation survives its host.