Vulnerability Development mailing list archives

Re: Outlook HTML VBS (demo)


From: zoachien () SECURAX ORG (Zoa_Chien)
Date: Mon, 22 May 2000 20:06:02 +0200


nothing happens in Eudora Pro 4.2

Zoa_Chien.

Heh.  Pretty good.  Just previewing the note popped the alert.
Netscape messenger 4.6.  Makes sense I suppose, it's just trying
to "display" the HTML.  I assume the note is still sandboxed, and
can't do anything terribly interesting? (Other than whatever browser
holes are in the version used to read it.)

Any Javascript experts?  Is there a Netscape API for going through the
mailbox?

                                        BB


Current thread: