[16525] in bugtraq
Re: Microsoft Word documents that "phone" home
daemon@ATHENA.MIT.EDU (Hal DeVore)
Sat Sep 2 16:13:44 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <30810.967843412@erehwon.bmc.com>
Date: Fri, 1 Sep 2000 16:23:32 -0500
Reply-To: Hal DeVore <haldevore@EARTHLING.NET>
From: Hal DeVore <haldevore@EARTHLING.NET>
X-To: dhalterm@CSC.COM
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <OFEC571282.6181CBE1-ON8525694C.0056645B@com>
>>>>> On Thu, 31 Aug 2000, "Don" == Don Halterman wrote:
Don> 3. I would expect that IE has distinct features to handle
Don> cookies (though I've never used it); the web page points
Don> this out. However, despite MS's best efforts to make it
Don> otherwise, there are other browsers such as Netscape and
Don> Opera--I saw no mitigation notes for those.
This is an educated guess at the moment so take it FWIS. Word
and other "internet enabled" applications built by Microsoft
are probably not using your browser exactly. They are almost
certainly using the wininet.dll and the API to it. And
wininet.dll is part of IE. So effectively, they're using IE.
--Hal
