Collected research
IE "Print Table of Links" Cross-Zone Scripting Vulnerability
Aviv Raff On .NET - Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability
IE's "Print Table of Links" appendix copies each link's URL into the generated print HTML without validation, and that generating script runs in the Local Machine Zone. A crafted href planted in a blog comment or wiki — http://www.google.com/?q=<script defer>new ActiveXObject("Wscript.Shell").run("calc")</script> — executes when the victim prints the page. IE7 and IE8b on patched XP.
Record
- Document
- Aviv Raff On .NET - Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability
- Researcher
- Aviv Raff
- Published by
- aviv.raffon.net
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Aviv Raff, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .