Whats on your clipboard (Serious Stuff) IE Vulnerability

**nofx** · 02-13-2004, 07:42 PM

smokey is going to own gfy with this now, thanks for sharing.

**kirupai** · 02-13-2004, 07:46 PM

Originally posted by nofx
smokey is going to own gfy with this now, thanks for sharing.

Yeah i was afraid someone will use it against any of us, so thats why i diceded to make it public here so people know about it and can do something to protect their selfs.

**lurking** · 02-13-2004, 07:47 PM

jawascript is disabled here. smokey only knows basic html tricks.

**Dveron** · 02-13-2004, 07:56 PM

Originally posted by kirupai
Ok go to this website:

http://www.infinitybit.com/comsec/clippy.html

As you can see it will show what is currently stored on your clipboard this a serious flaw on IE and it has been for more than 3 yeras. Now how is this dengerous... well lets say you have some sensitive data on your clipboard you visit a website it loads and it mails a form with a field from your clipboard and thats all it takes.

Solution:

Users can close this hole by changing the default Internet setting. Preferably, Microsoft
should change the default option to prompt on the Internet zone.

To close this hole in ~7 clicks: Tools, Internet Options, Security, Internet Zone,
Custom Level, Scripting, Allow paste options via scripting -> Disable.

Credits: Steven Vittitoe and Blake Sterzinger

Useful post. Thanks

**Shoehorn!** · 02-13-2004, 08:14 PM

Interesting. They don't know a damn thing with my Mac though. Windows blows.

**Lane** · 02-13-2004, 08:25 PM

Originally posted by lurking
jawascript is disabled here. smokey only knows basic html tricks.

how can u surf without js?

**lurking** · 02-13-2004, 08:29 PM

Originally posted by Lane

how can u surf without js?

I dont. it is disabled on the board.

**fuzebox** · 02-13-2004, 08:31 PM

I don't have a clipboard...

**goBigtime** · 02-13-2004, 08:34 PM

I <3 Mozilla FireFox

**gleb** · 02-13-2004, 08:34 PM

wow, thats pretty fucking serious

and before i thought address bar spoofing was hardcore

**kirupai** · 02-13-2004, 08:47 PM

Originally posted by gleb
wow, thats pretty fucking serious

and before i thought address bar spoofing was hardcore

Yeah adress spoofing is mainley used in phishing scams, they make it look more LEGIT which is a serious problem to.

**digifan** · 02-13-2004, 08:59 PM

Originally posted by TheSmutPeddlerDOTcom
Interesting. They don't know a damn thing with my Mac though. Windows blows.

**Mr.Fiction** · 02-13-2004, 08:59 PM

Someone used this exploit on GFY already. Good information on how to fix it.

**Smokey The Bear** · 02-13-2004, 09:05 PM

Originally posted by lurking
jawascript is disabled here. smokey only knows basic html tricks.

Your a fucking moron with no brains. This exploit has been around for the last year. Completely useless. WHy would i want your paste ?? especially when i can get most people's c:\ in here .

Also javascript is not disabled , you just dont have the ability to use it.


__________________
<a href="http://www.sucker.com"><img src="http://bestpornhost.com/gfy/jay.png" border="0"></a>

**Smokey The Bear** · 02-13-2004, 09:08 PM

And it isnt a flaw it is part of i.e. like it or hate it. Go to www.tinyurl.com and try it out.

**lurking** · 02-13-2004, 09:10 PM

Originally posted by Smokey The Bear
especially when i can get most people's c:\ in here

lol. whats mine.

**Smokey The Bear** · 02-13-2004, 09:11 PM

Originally posted by lurking

lol. whats mine.

Sorry i dont do requests.

__________________
<a href="http://www.sucker.com"><img src="http://bestpornhost.com/gfy/jay.png" border="0"></a>

**lurking** · 02-13-2004, 09:11 PM

Originally posted by Smokey The Bear

Sorry i dont do requests.

chump.

**Smokey The Bear** · 02-13-2004, 09:14 PM

Originally posted by lurking

chump.

No mitnick was a chump ( and a rat ) thats why he ended up in jail.

**lurking** · 02-13-2004, 10:36 PM

Originally posted by Smokey The Bear

No mitnick was a chump ( and a rat ) thats why he ended up in jail.

whats your point? are you trying to compare yourself to him? chump.

Whats on your clipboard (Serious Stuff) IE Vulnerability

Whats on your clipboard (Serious Stuff) IE Vulnerability

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment