Vulnerability Development mailing list archives

New/Hidden/Unimplemented IE Protocols (Re: Crash IE with shell://:)


From: Usman Akeju <manus () MIT EDU>
Date: Thu, 24 May 2001 11:18:26 -0400

Hey all,

So I have MS Visual Studio 6.0 installed, and I skimmed through the file DEVSHL.DLL
(just search for it) and found the following string:

" Sorry, that has not been implemented yet!   prospero:   outlook:    tn3270:
telnet: gopher: mailto: shttp:  https:  shell:  wais:   news:   nntp:   http:  
file:   afs:    cid:    mid:    ftp:    mk: "

Though some of these are obviously working already, I didn't take the time to type
each one of these into IE to see what happens, if anything, but maybe some of you
want to fux around with the non-implemented ones a bit?

I also remember seeing in MSHTML.DLL and/or other places these protocols that I'd
never heard of (as IE-supported at least), some of them stranger than others...:

snews:
newsrc:
rlogin:
wais:
url:
ldaps://
mic://
outday://
ms-its & its: (old, possibly related to mk:, but still weird --
               see http://helpware.net/htmlhelp/linktochm.htm)
cdl:

..and soon there will me more to come -- see the article on DNA 2000 at
http://www.devx.com/upload/free/features/entdev/1999/11nov99/cv1199/cv1199.asp

It's old, but I *think* it might be relevant.  Ignore if it isn't.  And if the
"unimplemented" protocols are already causing us problems...

-Usman Akeju://
;]://

P.S. - The hello:// --> shell:// crash only worked on me once, and after a reboot
couldn't be replicated.  The gopher://: crash works, though.  Running Win98SE
4.10.2222A using IE 5.50.4522.1800 SP1 +Q297328,q283908,Q286045,q290108,Q286043.

Chris Tobkin wrote:

Speaking of things they are building into the OS via IE, try
outlook:\\Mailbox%20-%20Your%20Name\  I find it somewhat interesting
that you can go directly into your inbox from a link like
outlook:\\Mailbox%20-%20Your%20Name\Inbox or your calendar
(outlook:\\Mailbox%20-%20Your%20Name\Calendar) for that matter..

// Chris
tobkin () intersec com


--
Bored?  Watch other people be bored at http://webcam.mit.edu !


Current thread: