Re: [Full-Disclosure] new worm - "warm-pussy.jpg".

[Valdis . Kletnieks]

On Thu, 13 Nov 2003 01:08:06 PST, Gadi Evron <[EMAIL PROTECTED]>  said:

> HTML _is_ plain-text.
> Just because the server sends it as plain text doesn't mean the browser 
> won't execute it.
> 
> It does.

Well.. sure... a .JPG might have some executable code in it, right? :)

At least this time they're improving.  They're executing plain text that
was called .jpg.  Last time, they executed javascript that was in the
comments field of an actual jpg.

pgp00000.pgp
Description: PGP signature