Tuesday, October 21, 2008

Chrome file-type checking vulnerability XSS

###########################################################
# Google Chrome 0.2.149.30, #
# file type check vulnerability #
# when browsing through ftp. #
###########################################################
# For example, when browsing: #
# ftp://ftp.example.net/picture.jpg #
# or it could be .txt, .pdf, etc... #
# Google Chrome does not check the file type. #
# #
# When browsing only ftp://ftp.example.net/ #
# you will see the picture.jpg file, like any other #
# image file. #
###########################################################

Example content of the picture.jpg file:
/Begin:
html>
body>
script>alert('backdoored');
/body>
/html>

End\

Reference:http://packetstormsecurity.org/0810-exploits/googlechrome-check.txt

0 comments: