Vulnerability Development: RE: help:// protocol in Windows XP Prof

[Lucas Valdeón <lvaldeon () matchmind es>]

 Same in fully patched W2000 Prof.

> -----Mensaje original-----
> De: Derek Kwan [mailto:Derek () Kwan ca]
> Enviado el: jueves, 08 de julio de 2004 0:58
> Para: vuln-dev () securityfocus com
> Asunto: Re: help:// protocol in Windows XP Prof
>
>
> In fact, you can try any h{a-z}{a-z}p://  will work...
>
> D
>
> <Quote> Bartosz Kwitkowski</Quote>
> >  There is funny thing in Internet Explorer 6.0 - Windows XP Professional
> > (fully patched).
> >
> >  When you are writing address in IE you can replace http:// by help://
> >
> >  example:
> >
> >  http://wb.pl/bartosz = help://wb.pl/bartosz
> >
> > and than hit <ENTER>... Page will open...
> >
> >  other...
> >
> >  help://www.securityfocus.com - looks funny, isn't? :-)
> >
> >  when IE opens page changes help:// to http://
> >
> >  BUT, BUT,
> >
> >  when you are create hyperlink <a href="help://wb.pl/bartosz">check</a>
> >
> >  it won't work - IE says syntax error...
> >
> >  I'm trying to exploit this...
> >
> >  Best regards,
> >  Bartosz Kwitkowski