Re: Outlook HTML VBS (demo)

[karl.prentner () WORLDSPAN COM (Prentner, Karl)]

This executed in Lotus Notes release 5.0.2a also. No scripts alowed!

                    Blue Boar
                    <BlueBoar@THIEVCO.        To:     VULN-DEV () SECURITYFOCUS COM
                    COM>                      cc:
                    Sent by: VULN-DEV         Subject:     Re: Outlook HTML VBS (demo)
                    List
                    <VULN-DEV@SECURITY
                    FOCUS.COM>

                    05/21/2000 10:27
                    PM
                    Please respond to
                    Blue Boar

Heh.  Pretty good.  Just previewing the note popped the alert.
Netscape messenger 4.6.  Makes sense I suppose, it's just trying
to "display" the HTML.  I assume the note is still sandboxed, and
can't do anything terribly interesting? (Other than whatever browser
holes are in the version used to read it.)

Any Javascript experts?  Is there a Netscape API for going through the
mailbox?

                                                    BB