full-disclosure - Opera/Netscape/Mozilla: Floppy access from liveconnect html page (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: schonef at uni-muenster.de (Marc Schoenefeld)
Subject: Opera/Netscape/Mozilla: Floppy access from liveconnect html page
 (fwd)

Hi,

just tried the following html page in opera 72/netscape 72/mozilla
on windows and I was prompted with an insert floppy prompt box.
The page was uploaded to a remote site and loaded from there.

(script)
a=Packages.org.apache.crimson.tree.XmlDocument.createXmlDocument("file:///a:/");
(/script)

Can anybody try this please to verify the issue ? Instead of a:
you could also please try com1/lpt1/prn/aux/clock$.

My used java version is jdk 1.4.2_01 browser plugin.

Thanks Marc

--

Never be afraid to try something new. Remember, amateurs built the
ark; professionals built the Titanic. -- Anonymous

Marc Sch?nefeld Dipl. Wirtsch.-Inf. / Software Developer
[ PGP Signature ok - Wed Oct  8 00:07:59 MES 2003 ]