[22642] in bugtraq
Re: mailto links
daemon@ATHENA.MIT.EDU (Scott Buchanan)
Thu Sep 13 13:38:41 2001
Message-ID: <3BA03C13.B30D81E6@axe.net.au>
Date: Thu, 13 Sep 2001 14:54:43 +1000
From: Scott Buchanan <scott@axe.net.au>
MIME-Version: 1.0
To: Martin Stricker <shugal@gmx.de>
Cc: bugtraq@securityfocus.com
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Note also that Netscape doesn't ever seem to deal with UUEncode'd
attachments, so its not really particular to _this_ 'bug'. I don't
think this is much of a worry, as, AFAIK, mailto links can't force
an email to be sent, they can only pop-up a mail window. In which
case it relies on the user to be stupid enough to click 'Send' on
a message that most likely smells funny.
Martin Stricker wrote:
>
> Craig Humphrey schrieb:
> >
> > Works with Outlook98 (from IE5.5sp1), though my new email window is
> > large enough to see the file.
>
> Does *not* work with Netscape Communicator 4.75 German, instead of an
> attachment I got this in the test email:
>
> begin 666 x.vbs
> M35-'0D]8(E1H:7,@=V%S(&$@:&ED9&5N(&%T=&%C:&UE;G0A(#QD;VYT<&%N
> 1:6,Y.3E >6%H;V\N8V]M/B(`
> `
> end
Regards,
Scott Buchanan [ scott.buchanan@axe.net.au ]=-.
Axe Online Pty. Limited - ABN 62 095 107 814 - Web: www.axe.net.au )
Level 1, 51A Hume St. Crows Nest, NSW, 2065 Phone: (02) 9437-0920 o
. - - -- ------=*
