[Plugins-writers] IE6 VML Vulnerability

Previous message: how2 vuln: "IE6 VML Vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

how2vuln@private

Question to everyone:

Is it feasible to write an effective network-only check for the latest IE6
VML vulnerability?

My response thusfar is no, primarily because I think there are many
different ways one could mask traffic to exploit the vulnerability. Perhaps,
more fundamental, is the nature of this vulnerability - it is higher up in
the stack and thus, will require more resident or privileged means to
effectively check for the vulnerability.

Thoughts?

_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers