Full Disclosure mailing list archives

Re: Notepad popups in Internet Explorer and Outlook


From: Georgi Guninski <guninski () guninski com>
Date: Thu, 07 Aug 2003 22:57:19 +0300

Richard, you irresponsible m$ puppy!
How irresponsible and self promoting of you to not give m$ chance to fix this huge hole!
btw, on win9x you may have more fun with view-source and wordpad:
http://lists.insecure.org/lists/bugtraq/2000/Feb/0388.html

georgi



Richard M. Smith wrote:
Hi,

Do Notepad popups represent a security risk or are they simply another
way for spammers and marketers to annoy us?  Because of a design flaw in
Internet Explorer, Notepad popup windows can be displayed from an HTML
email message or Web page regardless of browser security settings.  In
addition, Notepad popups can access files on a hard disk, possibilly
causing stability problems in a Windows saystem.



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: