[Full-disclosure] Results of a XSLT fuzzing effort

2013-03-08 Thread Nicolas Grégoire
Hi! I published last week a blog post describing the results of the XSLT fuzzing campaign I did in 2012. Now that most of the discovered vulnerabilities are patched, I've chosen to give away a dozen of PoC regarding Adobe Reader, Microsoft MSXML, Firefox, Webkit, ... Even if you are not in XML

Re: [Full-disclosure] Results of a XSLT fuzzing effort

2013-03-08 Thread antisnatchor
Nice one Nick, great job eheh :D Cheers antisnatchor Nicolas GrégoireMarch 8, 2013 10:12 AM Hi!I published last week a blog post describing the results of the XSLTfuzzing campaign I did in 2012. Now that most of the discoveredvulnerabilities are patched, I've chosen to give away

Re: [Full-disclosure] Results of a XSLT fuzzing effort

2013-03-08 Thread Simeon
+1 Am 08-Mar-2013 11:12, schrieb Nicolas Grégoire: Hi! I published last week a blog post describing the results of the XSLT fuzzing campaign I did in 2012. Now that most of the discovered vulnerabilities are patched, I've chosen to give away a dozen of PoC regarding Adobe Reader, Microsoft