Re: Rather large MSIE-hole

[jon schatz <jon () divisionbyzero com>]

On Thu, 2002-03-14 at 13:56, KF wrote:
> Sorry if someone else has said this... but has anyone tryed using + as a 
> space like you had to when using cmd.exe via unicode exploit?

i tried that a week ago like so:

var programName=new Array(
        'c:/winnt/system32/cmd.exe+/c+c:/winnt/system32/calc.exe'
);

no dice on Win2k+sp2+ie6

-jon

-- 
jon () divisionbyzero com || www.divisionbyzero.com
gpg key: www.divisionbyzero.com/pubkey.asc
think i have a virus?: www.divisionbyzero.com/pgp.html
"You are in a twisty little maze of Sendmail rules, all confusing."

Attachment: signature.asc
Description: This is a digitally signed message part