full-disclosure - Notepad popups in Internet Explorer and Outlook

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: guninski at guninski.com (Georgi Guninski)
Subject: Notepad popups in Internet Explorer and Outlook

Richard, you irresponsible m$ puppy!
How irresponsible and self promoting of you to not give m$ chance to fix this 
huge hole!
btw, on win9x you may have more fun with view-source and wordpad:
http://lists.insecure.org/lists/bugtraq/2000/Feb/0388.html

georgi

Richard M. Smith wrote:
> Hi,
> 
> Do Notepad popups represent a security risk or are they simply another
> way for spammers and marketers to annoy us?  Because of a design flaw in
> Internet Explorer, Notepad popup windows can be displayed from an HTML
> email message or Web page regardless of browser security settings.  In
> addition, Notepad popups can access files on a hard disk, possibilly
> causing stability problems in a Windows saystem. 
>