OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part IV

From: morning_wood (se_cur_ityhotmail.com)
Date: Fri Jan 02 2004 - 19:30:19 CST

> Your post isn't verry informative
> what kind of system did you test it on? It worked on my fully patched
> windows XP
>

WinXp Sp0 IE6 010817-1148

running "http://microsoft.bbs.us/malware.html" i get only a webpage with
"junkware"
and no file(s) on my hd.

running "malware.html" locally does produce the desired results, but then
again...
i can get any html to execute locally calling a remote location for the code, as
long as its run
from the local machine.

m.w00d

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html