Bugtraq mailing list archives

Re: Internet Explorer Bug


From: jpp () CYBERSOURCE COM (John Pettitt)
Date: Mon, 3 Mar 1997 13:13:09 -0800


Bug: IE will blindly run .url and .lnk files from remote servers.

Well that must qualify for brain dead hole of the week, here is a quick fix.

Rename the registry entry
"My Computer\HKEY_CLASSES_ROOT\InternetShortcut\shell\open\command"
 to "old.command"

Do the same for

My Computer\HKEY_CLASSES_ROOT\lnkfile\CLSID
(change to CLSID.old)


This will case .url files to be treated as .txt files and .lnk files to pop
the open/save dialog.

It's a gross kludge but it works.  Given the bug one could even create
a web page to do the regedits for you (arrrggghhhh).

John



Current thread: