Full Disclosure mailing list archives
RE: Window's O/S
From: "Haaland, Vegar Linge" <Vegar.Linge.Haaland () palantir no>
Date: Thu, 24 Nov 2005 13:13:11 +0100
Ok, the first one it will open (if you have, let's say: notepad and notepad.exe) is notepad.exe I tried a couple of stuff and here's my notes:) : The folde could be named notepad.exe notepad notepad.cmd or notepad.bat I also successfully got it to start cmd.exe by copying a copy of cmd to the desktop folder, and rename it to notepad.exe :) I'll bet there's tons of stuff we could make this bug do :D (Worked on Windows XP sp2) (btw, sorry about my English.. :S) -----Original Message----- From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of indianz () indianz ch Sent: 24. november 2005 12:44 To: pagvac Cc: full-disclosure () lists grok org uk Subject: Re: [Full-disclosure] Window's O/S Importance: High Hi there same effect under german windows xp sp2... i'm not really a windows guru, but i think, this has to do with some pre-defined windows and internet explorer search-paths. when you enter an url in internet explorer, and have a cd-rom in the drive, it will move the cd-rom (searching for something?). weird! GreetZ from IndianZ
OK, so here is where creativity kicks in. Anyone has any interesting ideas for exploiting this bug as an attack vector? On 11/24/05, Sibillano Fabio <Fabio.Sibillano () agrileasing it> wrote:Confirmed on Windows XP SP2 (English Version).Italian version too... weird! The information contained in this e-mail may be privileged, confidential, and protected from disclosure. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or duplication of this communication is strictly prohibited. If you have received this communication in error, please notify the sender immediately and delete all copies .-- pagvac (Adrian Pastor) www.ikwt.com - In Knowledge We Trust _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
GreetZ from IndianZ mailto:indianz () indianz ch http://www.indianz.ch _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Window's O/S, (continued)
- Re: Window's O/S pagvac (Nov 24)
- Re: Window's O/S Dave Korn (Nov 24)
- RE: Window's O/S Aditya Deshmukh (Nov 24)
- Re: Window's O/S pagvac (Nov 24)
- Re: Window's O/S indianz (Nov 24)
- RE: Window's O/S Cassidy Macfarlane (Nov 24)
- Re: Window's O/S Greg (Nov 24)
- Re: Window's O/S Brian Dessent (Nov 24)
- Re: Window's O/S Brian Dessent (Nov 24)
- Re: Window's O/S Andres Tarasco (Nov 24)
- Re: Window's O/S Greg (Nov 24)
- RE: Window's O/S Haaland, Vegar Linge (Nov 24)
- RE: Window's O/S Fielder, Kevin (GE Consumer Finance) (Nov 24)
- Re: Window's O/S Stuart Dunkeld (Nov 24)
- Re: Window's O/S Marek Isalski (Nov 24)
- Re: Window's O/S Dave Korn (Nov 24)
- Re: Re: Window's O/S Gilles DEMARTY (Nov 24)
- RE: Window's O/S Aditya Deshmukh (Nov 24)
- Re: Window's O/S Dave Korn (Nov 24)
- Window's O/S houser (Nov 24)
- RE: Window's O/S Cassidy Macfarlane (Nov 25)
- Re: Window's O/S Peter Ferrie (Nov 25)
- Re: Window's O/S pagvac (Nov 24)