[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype
these work inside OE, default with html turned off
they do not work when clicked from a normal
----- Original Message -----
From: "Thierry Zoller" <Thierry@xxxxxxxxx>
To: <bugtraq@xxxxxxxxxxxxxxxxx>; <full-disclosure@xxxxxxxxxxxxxxxxx>
Sent: Saturday, October 06, 2007 8:06 AM
Subject: Re: [Full-disclosure] URI handling woes in Acrobat Reader,
I would deem 1 and 3 as resonable (intented) behaviour.
2) now do the very same thing on a system with Windows XP and IE7.
calc.exe is executed.
Confirmed here, that's definately a Problem, and should be linked to
the Windows URI Handler. (IMHO)
The behaviour is this :
The extension determines the handler to use to shell
Usese the cmd handler to open calc (which executes)
uses notepad and tries to open calc.
Somethings definately broken with the URI handler (imho)
Fingerprint : 5D84 BFDC CD36 A951 2C45 2E57 28B3 75DD 0AC6 F1C7
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/