RES: [VulnWatch] Re: Remote overflow in MSIE script action handlers (mshtml.dll)

"Rodrigo Fernandez" <[email protected]> Tue, 21 Mar 2006 14:44:14 -0300
Newsgroups gmane.comp.security.vulnerabilities.watch.general
Message-ID <FBEA793920519A44A3D582BA9446C21101B8C6D2@correiorj01.cetip.com.br>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