Re: Outlook, HTML & VBS

[Larry.Ogrodnek () DOWJONES COM (Ogrodnek, Larry)]

Well, first you have to go to Tools->Options->Mail Format

then, select send as HTML...

of course, I'm an idiot and couldn't figure out how to send
arbitrary html in an outlook message, but, you can just put
together a file in any editor, then, under the same Mail Format
Tab under options, make a new signature and use your HTML
file as the sig, and that'll work.  Of course, the only scripting
language that seems to actually execute is javascript.  I've tried
the <script language=VBScript> but, Outlook does the right thing
and doesn't execute it.  it gives me a scripting error.  go microsoft.

-----Original Message-----
From: Joerg Weber [mailto:joerg () FS IS UNI-SB DE]
Sent: Sunday, May 21, 2000 12:28 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Outlook, HTML & VBS

BB, Everyone,

this certainly is a lame question but Outlook isn't exactly my speciality
:)

I'm trying to embedd a script into a mail that pops up a MsgBox telling
the user (s)he is vulnerable to vbs-scripting virii. Now, attaching this
is sorta lame. So I'm trying to have Outlook execute the script when the
message is read.
Could someone explain how you create arbitrary HTML code so Outlook
renders/executes it? I've that far just been able to use Outlooks build-in
formating features.

Thanks everyone!

        Joerg