[10534] in bugtraq
Re: Bookmarks security vulnerabilities in both Internet Explorer
daemon@ATHENA.MIT.EDU (Jim Reavis)
Thu May 13 18:06:43 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Message-Id: <E14947B05218D111AC9000AA002F4CE3133AC9@p5100.aistrat.com>
Date: Tue, 11 May 1999 21:59:32 -0700
Reply-To: Jim Reavis <jreavis@SECURITYPORTAL.COM>
From: Jim Reavis <jreavis@SECURITYPORTAL.COM>
To: BUGTRAQ@NETSPACE.ORG
I did get this to work as described with IE 5.0 on Win 95. It failed until
I re-read the directions and opened a local GIF with the "file:///" syntax
versus "c:\"
Using NT SP5, I got an access denied in a large dialog box that contained
Georgi's code. He didn't mention NT in his original advisory, so I assume
it is just Win 9X issue?
Jim Reavis
SecurityPortal.com - the focal point for security on the Net
Jreavis@securityportal.com <mailto:Jreavis@securityportal.com>
-----Original Message-----
From: Russ [mailto:Russ.Cooper@RC.ON.CA]
Sent: Monday, May 10, 1999 2:20 PM
To: BUGTRAQ@NETSPACE.ORG
Subject: Re: Bookmarks security vulnerabilities in
both Internet Explorer 5.0 and Netscape Communicator 4.51 (Win95)
I am unable to reproduce this on IE 5.0 with SP5. I get an
error message
stating "Cannot find server or DNS error" after following
Georgi's
instructions using TEST.TXT.
Even pasting the entire script in the address box fails to
reproduce his
described effects.
Cheers,
Russ - NTBugtraq moderator
