Featured Content
|
|
||||
Daily PDA Today News
<< Palm Chess Program Defeats Chess Grandmaster 3-1 in match | ARCHIVES | 100-Year-Old School on Technology Fast Track; Illinois Institution Plans Schoolwide Use of palmOne Handhelds >>
Posted by: Bill Landon on Thu, Jan 27, 2005 Provided by: FreeTranslation.com |
||
| Multiple Vulnerabilities in Pocket IE: Pocket IE Attack Overview |
||
Pocket IE Attack Overview
There are several weaknesses in Pocket IE that can be used to trick end users into submitting local and/or sensitive data, such as usernames and passwords. The potential for exploiting these vulnerabilities are restricted only by an attackers imagination. However, Pocket IE is not as powerful as its big brother, and as such, an attacker is limited in what techniques she can use to launch the attack. For example, Pocket IE has no support for the IFrame tag, which is extremely useful in XSS and browser-based attacks. In addition, Pocket IE does not support every JavaScript command commonly used by attackers. The final example presented is an attempt to combine these individual flaws into one attack and is only meant to serve as a proof of concept. To view the examples and a detailed write up please point your browser to the following link http://www.airscanner.com/tests/ie_flaw/ie_attack.htm |
||
|
|
||
Email
Print
Comments
(0)<< Palm Chess Program Defeats Chess Grandmaster 3-1 in match | ARCHIVES | 100-Year-Old School on Technology Fast Track; Illinois Institution Plans Schoolwide Use of palmOne Handhelds >>
Last 5 News Items From This Catagory
LandWares 2005 Wine Enthusiast Guide Now Available
Olympus R1000 worlds first TDA (Tough Digital Assistant )
Pocket PC for Everyone PDF Book
"AntHill" for Pocket PC is released
"Candy Catchup" Released by AIM Productions