DSO Exploits

[Spock]

Ref: GreyMagic Security Advisory GM#001-IE

GreyMagic Security Advisory GM#001-IE
By GreyMagic Software, Israel.
27 Feb 2002.
Topic: DSO Exploit - Executing programs without Scripting or ActiveX.

Discovery date: 25 Feb 2002.

Affected applications:
Any application that hosts the WebBrowser control (5.5+) is affected since this exploit does not require Active Scripting or ActiveX. Some of these applications are:

Microsoft Internet Explorer
Microsoft Outlook
Microsoft Outlook Express