RE: ZDnet forum: IE formatting local drive

From: Thor Larholm (thorat_private)
Date: Thu Nov 14 2002 - 03:57:29 PST

Next message: Michael Bacarella: "Better security through shame"

Previous message: zen-parse: "Netscape/Mozilla: Exploitable heap corruption via jar: URI handler."
Maybe in reply to: Alan Rouse: "ZDnet forum: IE formatting local drive"
Next in thread: Gossi The Dog: "Re: ZDnet forum: IE formatting local drive"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This is just a copy of Andreas Sandblads advisory, with a new command :)

Regards
Thor Larholm, Security Researcher
PivX Solutions, LLC

Strike Now, StrikeFirst!
http://www.pivx.com/sf.html

-----Original Message-----
From: Alan Rouse [mailto:ARouseat_private]
Sent: 11. november 2002 17:22
To: bugtraqat_private
Subject: ZDnet forum: IE formatting local drive


Format a local drive by visiting a URL from a fully patched Windows / IE
platform.  This appeared last night:  
 
http://forums.zdnet.com/group/zd.Security.Virus.Alerts/community/communi
ty.tpt/@thread@33885@F@1@D-,D@ALL/@article@mark@33885?EXP=ALL&VWM=&ROS=&
OC=75

Next message: Michael Bacarella: "Better security through shame"
Previous message: zen-parse: "Netscape/Mozilla: Exploitable heap corruption via jar: URI handler."
Maybe in reply to: Alan Rouse: "ZDnet forum: IE formatting local drive"
Next in thread: Gossi The Dog: "Re: ZDnet forum: IE formatting local drive"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Nov 16 2002 - 20:31:28 PST