Re: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER

From: Mark Kennedy (mkennedyat_private)
Date: Tue Sep 04 2001 - 08:08:50 PDT

Next message: Marco van Berkum: "Re: SSH 2.4.0/3.0.1 usernames guessable ?"

Previous message: Mike Johnson: "Cobalt Cubes (was: Re: Fwd: Returned post for bugtraqat_private)"
Maybe in reply to: http-equivat_private: "OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER"
Next in thread: Astalavista Security Group | Ivan Schmid: "Re: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER"
Reply: Astalavista Security Group | Ivan Schmid: "Re: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I have confirmed it on the RTM build of Windows XP.

Thanx,

Mark




                                                                                                                  
                    "svend                                                                                        
                    ladefoged"           To:     <http-equivat_private>, <Vuln-Devat_private>            
                    <kain@mongol.        cc:                                                                      
                    dk>                  Subject:     Re: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER            
                                                                                                                  
                    09/01/2001                                                                                    
                    01:03 PM                                                                                      
                                                                                                                  
                                                                                                                  




confirmed working on

English Win98SE 4.10.2222 A
IE6 6.0.2600.0000 (i like the 2600 part)
OE6  6.0.2600.0000

all 98 hitfixes applied, fresh IE6 install.

A side note, i installed IE6 and deselected a few things like VBscript and
media player. Doing my usual surfing up came dialogs that i 'had to
iunstall
vbscripting and media player' all the time... so in the end i just went
with
it. Thats kinda stupid aint it? the pages i frequent worked fine without
these add-ons earlier, but with IE6 no go.

too bad..



----- Original Message -----
From: <http-equivat_private>
To: <Vuln-Devat_private>
Sent: Saturday, September 01, 2001 9:37 PM
Subject: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER


> working demo:
>
> harmless *.exe. Ensure OE6 is default in that the new security feature is
> not enabled.
>
> http://www.malware.com/bang.zip
>
> Thanks.
>
> we'd appreciate some feedback before we submit to BT.
>
> Does it work on all OS's if you accept 'open file' or do the various OS's
> incorporate additional safeguards.
>
>
> ---
> http://www.malware.com
>
>
>
>
>
> _______________________________________________________
> Send a cool gift with your E-Card
> http://www.bluemountain.com/giftcenter/
>
>

Next message: Marco van Berkum: "Re: SSH 2.4.0/3.0.1 usernames guessable ?"
Previous message: Mike Johnson: "Cobalt Cubes (was: Re: Fwd: Returned post for bugtraqat_private)"
Maybe in reply to: http-equivat_private: "OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER"
Next in thread: Astalavista Security Group | Ivan Schmid: "Re: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER"
Reply: Astalavista Security Group | Ivan Schmid: "Re: OE6 + VBS + WSH + WIN200 + XP + HTML.DROPPER"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Sep 04 2001 - 08:51:35 PDT