Bugtraq mailing list archives
RE: TXT or HTML? -- IE NEW BUG
From: Daniel Lukasiak <ashtray () estrai com>
Date: Sun, 29 Jul 2001 10:05:13 +0200 (CEST)
On Sat, 28 Jul 2001 arivanov () sigsegv cx wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I may be terribly mistaken, but I think that this to some extent has been discussed previously on Bugtraq. I cannot get through to the securityfocus web site all morning so pls excuse me for not quoting the exact post where this was mentioned the first time. Quoting from memory, so excuse me for any discrepancies with the original post (it was more than 6 months ago): IE ignores not just the extension. If I recall correctly mime types supplied by a server are happily ignored as well. What happens is IE looks at the first 200 bytes or so and desides based on "magic" first, looks the mime type/extension later. So it is not just HTML.
Also IE runs some programs looking just for "extention" like Word or Excel files. The another bug (in version 5.0 or 5.5, not in 4.5) is implementation for viewing/editing Word (.doc) files. Of course IE runs Word no mather is MIME for executables or jpeg. Program will return error and die when you click on "back" button. Daniel /*Estrai*/ Lukasiak
Current thread:
- Re: TXT or HTML? -- IE NEW BUG, (continued)
- Re: TXT or HTML? -- IE NEW BUG Dylan Griffiths (Jul 28)
- Re: TXT or HTML? -- IE NEW BUG bjarne bingo (Jul 28)
- Re: TXT or HTML? -- IE NEW BUG Nathan Neulinger (Jul 28)
- Re: TXT or HTML? -- IE NEW BUG Magnus Bodin (Jul 29)
- Re: TXT or HTML? -- IE NEW BUG Justin Nelson (Jul 29)
- Re: TXT or HTML? -- IE NEW BUG Aaron Whiteman (Jul 29)
- Re: TXT or HTML? -- IE NEW BUG Justin Nelson (Jul 30)
- Re: TXT or HTML? -- IE NEW BUG Magnus Bodin (Jul 29)
- Re: TXT or HTML? -- IE NEW BUG Fred Oliveira (Jul 28)
- Re: TXT or HTML? -- IE NEW BUG Tom Laermans (Jul 29)
- RE: TXT or HTML? -- IE NEW BUG arivanov (Jul 28)
- RE: TXT or HTML? -- IE NEW BUG Daniel Lukasiak (Jul 29)
- Re: TXT or HTML? -- IE NEW BUG Trevor O'Donnal (Jul 28)
- RE: TXT or HTML? -- IE NEW BUG Microsoft Security Response Center (Jul 29)
- RE: TXT or HTML? -- IE NEW BUG Rebecca Kastl (Jul 29)
- Re: TXT or HTML? -- IE NEW BUG Oliver Bleutgen (Jul 30)
- RE: TXT or HTML? -- IE NEW BUG Deirdre Warshall (Jul 30)
- Re: TXT or HTML? -- IE NEW BUG Aaron Bentley (Jul 30)
- Re: CGI, PATH_INFO, convenience/security (TXT or HTML? -- IE NEW BUG) Peter W (Jul 31)
- Re: CGI, PATH_INFO, convenience/security (TXT or HTML? -- IE NEW BUG) Marc Slemko (Jul 31)
- Re: CGI, PATH_INFO, convenience/security (TXT or HTML? -- IE NEW BUG) Peter W (Jul 31)