Simpliciti Locked Browser Jail Breakout Vulnerability (fwd)

... ciao:

    in the not too distant past, scott had asked about a stand-alone
browser appliance, for lack of a better term.  while what follows does
not comply with the original specification, vis-a-vis os, it might
provide some insight into security issues ...

-- 
... i'm a man, but i can change,
    if i have to , i guess ...

---------- Forwarded message ----------
Date: Tue, 1 Aug 2006 17:15:54 -0700
From: EvilPacket <evilpacket <at> gmail.com>
To: bugtraq <at> securityfocus.com
Subject: Simpliciti Locked Browser Jail Breakout Vulnerability

Simpliciti Locked Browser Jail Breakout Vulnerability
ESRL

Discovery Date: March 20, 2006
Discovery By: Adam Baldwin (adam_baldwin <at> evilpacket.net)

Versions Effected: All versions

Background:
Simpliciti Locked Browser is a product that provides "no-programming
required PC lockdown..." functionality for common-access PCs or
kiosks. "You can quickly create a limited or restricted Internet usage
environment for users in places such as retail kiosks, libraries,