Full Disclosure mailing list archives
Re: Window's O/S
From: "Dave Korn" <davek_throwaway () hotmail com>
Date: Thu, 24 Nov 2005 14:52:17 -0000
pagvac wrote in news:b7a807650511240317n2eed488dr604e8e8f3cbd22d7 () mail gmail com
Confirmed on Windows XP SP2 (English Version). I still can't understand why that happens. I tried doing the same thing using different folder names of default Windows application executables (wordpad, iexplore, etc...) but it doesn't work.
Because iexplore.exe implements "View source" by storing the source in a
temp file and then launching the command line "notepad <temp_file_name>",
and in the case above, the current directory of the iexplore.exe process
must be the desktop, and since 'doze always searches '.' as the first
element of %PATH%, it finds the folder, and then launches it. Note that you
can achieve the same effect by saying "start <foldernameincurrentdir>" at a
DOS prompt; see MSDN for ShellExecuteEx if you want the real innards of the
problem.
This is also very much like the issue with having a file called
"program.exe" in the root of your C: drive; the next time someone tries to
launch a program through a path like "C:\program files\foo\bar.exe", and
they don't adequately quote the path, 'doze interprets it as meaning "Run
C:\program.exe with the single command-line argumetn 'file\foo\bar.exe'"
cheers,
DaveK
--
Can't think of a witty .sigline today....
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Window's O/S jacob jango (Nov 24)
- Re: Window's O/S Stelian Ene (Nov 24)
- Re: Window's O/S Native.Code (Nov 24)
- Re: Window's O/S pagvac (Nov 24)
- Re: Window's O/S Native.Code (Nov 24)
- Re: Window's O/S pagvac (Nov 24)
- Re: Window's O/S Dave Korn (Nov 24)
- RE: Window's O/S Aditya Deshmukh (Nov 24)
- <Possible follow-ups>
- Re: Window's O/S pagvac (Nov 24)
- Re: Window's O/S indianz (Nov 24)
- RE: Window's O/S Cassidy Macfarlane (Nov 24)
- Re: Window's O/S Greg (Nov 24)
- Re: Window's O/S Brian Dessent (Nov 24)
- Re: Window's O/S Brian Dessent (Nov 24)
- Re: Window's O/S Andres Tarasco (Nov 24)
- Re: Window's O/S Greg (Nov 24)
- RE: Window's O/S Haaland, Vegar Linge (Nov 24)
- RE: Window's O/S Fielder, Kevin (GE Consumer Finance) (Nov 24)
(Thread continues...)
- Re: Window's O/S Stelian Ene (Nov 24)
