[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Law11-OE16omjpD3zCP00013799@hotmail.com>
From: se_cur_ity at hotmail.com (morning_wood)
Subject: HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding?
RE: [Full-Disclosure] HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding?i was not clear if it was an issue, nor do i see my post.. heh
it should be viewed in its original format ( html ) preferably by online mail services to show this is accessing a local file. there is no malicious content
Donnie
----- Original Message -----
From: Joshua Thomas
To: full-disclosure@...ts.netsys.com
Sent: Monday, August 04, 2003 6:17 PM
Subject: RE: [Full-Disclosure] HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding?
Do you have an exploit example for this that is anything other than just an annoyance?
Joshua Thomas
Network Operations Engineer
PowerOne Media, Inc.
tel: 518-687-6143
jthomas@...eronemedia.com
-----Original Message-----
From: morning_wood [mailto:se_cur_ity@...mail.com]
Sent: Monday, August 04, 2003 7:55 PM
To: incidents@...urityfocus.com; 0day; full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] HTML FORMATED MAIL ( ie - oe - html ) bgsound local file - ding?
ding ding ding <--- its a local file
this should work reading FROM hotmail as well or any web ( html ) based
mail reader ( i think )
the tag <BGSOUND> carries many optopns as well, and referenced at
http://msdn.microsoft.com/workshop/author/dhtml/reference/objects/bgsound.asp
this is calling c:\windows\media\ding.wav ( 9x / XP ) and c:\winnt\media\ding.wav
this affects Microsft Win9x / NT / 2K / XP / 200? is this an annoyance or bug?
Donnie Werner
morning_wood@...labs.com
http://e2-labs.com
view this online at http://exploit.philez.com/ding.htm
t'nks buRdeN fer the test'n
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030804/39a5aa16/attachment.html
Powered by blists - more mailing lists