Re: Bookmarks security vulnerabilities in both Internet Explorer

[jreavis () SECURITYPORTAL COM (Jim Reavis)]

I did get this to work as described with IE 5.0 on Win 95.  It failed until
I re-read the directions and opened a local GIF with the "file:///" syntax
versus "c:\"

Using NT SP5, I got an access denied in a large dialog box that contained
Georgi's code.  He didn't mention NT in his original advisory, so I assume
it is just Win 9X issue?

Jim Reavis
SecurityPortal.com - the focal point for security on the Net
Jreavis () securityportal com <mailto:Jreavis () securityportal com>



                -----Original Message-----
                From:   Russ [mailto:Russ.Cooper () RC ON CA]
                Sent:   Monday, May 10, 1999 2:20 PM
                To:     BUGTRAQ () NETSPACE ORG
                Subject:        Re: Bookmarks security vulnerabilities in
both Internet Explorer 5.0 and Netscape Communicator 4.51 (Win95)

                I am unable to reproduce this on IE 5.0 with SP5. I get an
error message
                stating "Cannot find server or DNS error" after following
Georgi's
                instructions using TEST.TXT.

                Even pasting the entire script in the address box fails to
reproduce his
                described effects.

                Cheers,
                Russ - NTBugtraq moderator