Vulnerability Development mailing list archives

Re: help:// protocol in Windows XP Prof


From: "Derek Kwan" <Derek () Kwan ca>
Date: Wed, 7 Jul 2004 18:57:50 -0400 (EDT)

In fact, you can try any h{a-z}{a-z}p://  will work...

D

<Quote> Bartosz Kwitkowski</Quote>


 There is funny thing in Internet Explorer 6.0 - Windows XP Professional
(fully patched).

 When you are writing address in IE you can replace http:// by help://

 example:

 http://wb.pl/bartosz = help://wb.pl/bartosz

and than hit <ENTER>... Page will open...

 other...

 help://www.securityfocus.com - looks funny, isn't? :-)

 when IE opens page changes help:// to http://

 BUT, BUT,

 when you are create hyperlink <a href="help://wb.pl/bartosz">check</a>

 it won't work - IE says syntax error...

 I'm trying to exploit this...

 Best regards,
 Bartosz Kwitkowski



Current thread: