[Full-disclosure] FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses.

2012-04-07 Thread klondike
Given to their nature chocolate easter eggs present a few vulnerabilities that can be exploited by a malicious attacker to gain complete control of a person's hate. FSA2012-1: 1. Summary Impact: high Exploitability: local Synopsis: Through some special unintended actions and attacker can cause an

Re: [Full-disclosure] FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses.

2012-04-07 Thread rancor
Nice catch! "Glad påsk" as we say in Sweden Den 7 apr 2012 16:23 skrev "klondike" : > Given to their nature chocolate easter eggs present a few > vulnerabilities that can be exploited by a malicious attacker to gain > complete control of a person's hate. > > FSA2012-1: > 1. Summary > Impact: high

Re: [Full-disclosure] FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses.

2012-04-07 Thread fabrice
Not to mention, if a MITM attack is going on at the same time as a trojanized chocolate easter egs (TCEE) one, the victim will indeed be the MITM due to the one time use nature of the TCEE attack. ___ Full-Disclosure - We believe in it. Charter: htt