Originally published on eve.gd on 5 March 2008, last updated 6 September 2026.
Read this post on the web (with images, PDF and citation details)
Just a quick post to draw attention to Ronald's excellent article at http://www.0x000000.com/?i=525 where he has pulled off a very interesting remote file access in IE7. The attack works by including an invalid DTD on an XML file which then streams the content of the requested file in its error message.
http://www.0x000000.com/?i=525
Use IE7? Be afraid.
This reference list has been generated, in many cases, through an automated process and may therefore contain errors or incomplete metadata. It is provided purely as assistance for finding the items mentioned within this post.
1. Ronald's article on IE7 remote file access <http://www.0x000000.com/?i=525>