OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1997: Re: L0pht Advisory: IE4.0

Re: L0pht Advisory: IE4.0

David LeBlanc (dleblancMINDSPRING.COM)
Mon, 10 Nov 1997 22:54:55 -0500 

At 03:43 PM 11/10/97 -0500, DilDog wrote:
>      Document:  L0pht Security Advisory
>    URL Origin:  http://l0pht.com/advisories.html
>  Release Date:  November 1st, 1997
>   Application:  Microsoft Internet Explorer 4.0 Suite
>      Severity:  Viewing remote HTML content can execute arbitrary native
code
>        Author:  dildogl0pht.com
> Operating Sys:  Windows 95
>
>---------------------------------------------------------------------------
---

Hmmm - all it does on NT is:

Internet Explorer cannot open the Internet site

res://A؀-3ɀ ٱ_    CPj X     R
ZZP3۳ S SPӃ XP3۳9S     SPӃ πӐ
Ӑ-------------C:\AUTOEXEC.BAT ECHO MICRO$OFT 0WNZ YOU... REPENT
AND BE SAVED! PAUSE ----------------AAAABBBBC  DDDEDW/

The filename or extension is too long.

Of course, you did say it applied to Win95...

OTOH, I'm _really_ disappointed - I've been hearing that since I was
running IE 4.0 that I could be owned.  Thought for a minute or two that I
might need to start using netcat as my browser.




David LeBlanc           |Why would you want to have your desktop user,
dleblancmindspring.com |your mere mortals, messing around with a 32-bit
                        |minicomputer-class computing environment?
                        |Scott McNealy