Vulnerability Development mailing list archives

Re: Win 2000 & IE 'shell://' problem?


From: antitrack_legend () TELEKABEL AT (Alex Schuetz)
Date: Fri, 2 Jun 2000 20:28:13 +0200


Hello!

I tried the patterns "shell:" , "shell://", and "shell:\\" on
my _Windows 98 2nd edition_ together with internet explorer
5.00.2614.3500 (to be precise with version numbers, that is) and got
some interesting result. First, nothing would happen, except a call to a
curious DLL...the error message was like this:

---------quote error start

Öffnen Sie die res://C:\WINDOWS\SYSTEM\SHDOCLC.DLL/syntax.htm#shell://
Homepage, und suchen Sie dann nach Links zu den gewünschten
Informationen.

Falls Sie die Adresse der Seite manuell in der Adressleiste eingegeben
haben, stellen Sie sicher, dass die Adresse keine Tippfehler enthält.

--------- quote error end

So we can see, a "curious" DLL is called, SHDOCLC.DLL .

A few moments later, I wasnt able to ping any computer at all, always
getting error code 10050. Duh. I rebooted, but can't always reproduce
this effect. I'll keep to you up to date trying to 100% reproduce these
results. See ya...

Alex


Current thread: