News for hackers. Stuff that matters.

A comment on A file that's both an acceptable HTML page and a JPEG (view source on it). Parent comment

Re:A file that's both an acceptable HTML page and a JPEG (vi... by subleq on Friday July 06, 2012 @03:28PM (#4209265)
Yes, certain versions of IE can be tricked into executing javascript in images: http://www.h-online.com/security/features/Risky-MIME-sniffin...
[ Parent | on HN ]
Re:A file that's both an acceptable HTML page and a JPEG (vi... by Tobu on Saturday July 07, 2012 @09:06AM (#4211538)
Indeed: https://code.google.com/p/browsersec/wiki/Part2#Survey_of_co...
[ Parent | on HN ]