The Gran-Son of Cuartango Hole
Description
Last variant of Cuartango Hole
The second Microsoft's fix about the USP issue
was also wrong. MS has fixed the problem only 24
hours after the problem was reported.
Affected Software
Internet Explorer 4
Status
Reported to MS Dec 22 1998
Confirmed and fixed Dec 23 1988.
http://www.microsoft.com/windows/ie/security/spoof.asp
Exploit
http://pages.whowhere.com/computers/cuartangojc/gson2.html
The Grand-Son of Cuartango Hole demo
The Grand-Son of Cuartango Hole
demo
The box below (yellow) is a Microsoft
Web Browser ActiveX object
The box below (blue) is a
Microsoft Forms 2.0 TextBox ActiveX object
The scripts behind this pages will copy the
TextBox contents to the file box.