Vulnerability Development mailing list archives

Re: Rather large MSIE-hole


From: Raul Dias <chaos () swi com br>
Date: Thu, 14 Mar 2002 01:19:46 -0300

Jim Harrison (SPG) <jmharr () microsoft com> wrote:
While it's certainly true that you can hard-code any path you want to
any normally-benign executable on the system, any hacker worth their
salt would know how to get and use Windows system variables to make the
system cooperate in its own self-destruction.

For instance, "%SystemRoot%" would eliminate the need for "C:\windows"

* Jim Harrison 
MCP(NT4, 2K), A+, Network+

This is a newbie question, 

but where can I find a list os system variables and its compatibility
thru versions of windows?


Thanks.

Raul Dias


Current thread: