full-disclosure - Notepad popups in Internet Explorer and Outlook

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: rms at computerbytesman.com (Richard M. Smith)
Subject: Notepad popups in Internet Explorer and Outlook

I fiddle a little bit with view-source: and WordPad but nothing seemed
too interesting.  WordPad always opened a large file as a plain text
file.  I was checking to see if it might open a file as Word .DOC file,
but had no luck.

Richard

-----Original Message-----
From: Georgi Guninski [mailto:guninski@...inski.com] 
Sent: Thursday, August 07, 2003 3:57 PM
To: Richard M. Smith
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Notepad popups in Internet Explorer and
Outlook

Richard, you irresponsible m$ puppy!
How irresponsible and self promoting of you to not give m$ chance to fix
this 
huge hole!
btw, on win9x you may have more fun with view-source and wordpad:
http://lists.insecure.org/lists/bugtraq/2000/Feb/0388.html

georgi

Richard M. Smith wrote:
> Hi,
> 
> Do Notepad popups represent a security risk or are they simply another
> way for spammers and marketers to annoy us?  Because of a design flaw
in
> Internet Explorer, Notepad popup windows can be displayed from an HTML
> email message or Web page regardless of browser security settings.  In
> addition, Notepad popups can access files on a hard disk, possibilly
> causing stability problems in a Windows saystem. 
>