full-disclosure - Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: steve.wray at paradise.net.nz (Steve Wray)
Subject: Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II

[snip]
>Because it is an html file proper, Internet Explorer opens it. The 
>scripting inside is then parsed and fired. That scripting is pointing 
>back to the same executable file with our original codebase object 
>from the year 2000 and because it is a self-executing html file, it 
>executes ! 

It does at least offer an open/save/cancel dialog...
so it doesn't execute automagically.


>Tested IE5.5 and IE6. Fully self-contained harmless *.exe:

>http://www.malware.com/html.exe.zip 

>Be aware of html files out there.