Re: Automatic MIME type detection in Internet Explorer 6.x allowed
Denis Jedig <[email protected]>
| Newsgroups | gmane.comp.security.vulnerabilities |
|---|---|
| Message-ID | <[email protected]> |
[email protected] wrote: > Automatic MIME type detection in Internet Explorer 6.x allowed > downloading executable file automatically If you change file headers to JPEGs, it's not an executable file any more - that simple. Even if it were, "downloading" something and placing it in temporary files is not a vulnerability. Executing it is, but this can't happen with the described mechanisms. Denis