full-disclosure - Does your IE6 crash with these "URLs"?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: magnus at bodin.org (Magnus Bodin)
Subject: Does your IE6 crash with these "URLs"?

On Thu, Jul 17, 2003 at 11:06:30AM -0700, Troy wrote:
> <HTML><HEAD>
> <meta HTTP-EQUIV="REFRESH" CONTENT="0; URL=ftp://ftp*://?">
> </BODY></HTML>
> 
> Fortunately, OE isn't stupid enough to launch the URL automatically if I
> open an HTML message with that source, but I wonder about other
> HTML-capable news readers.

My guess: Put it in an <img src=" "> and you'll see.

/magnus

-- 
http://x42.com