Vulnerability Development: RE: active x controls that can access the hard disk

[Thor Larholm <Thor () jubii dk>]

The FileSystemObject ("Scripting.FileSystemObject) to name but one.

As always, trying to use unsafe controls ordinarily will give the enduser a
warning, and hence the choice.

-----Original Message-----
From: jj ss [mailto:seccret86 () yahoo com]
Sent: 2. juni 2002 08:58
To: vuln-dev () securityfocus com
Subject: active x controls that can access the hard disk


Hello

Does anybody know if there are any active x controls
that are part of windows that would allow a malicious
script to write a binary file to the hard disk (like
an executable)?

thanks

Jhon

__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com