Vulnerability Development mailing list archives

RE: help:// protocol in Windows XP Prof


From: Lucas Valdeón <lvaldeon () matchmind es>
Date: Thu, 8 Jul 2004 17:51:21 +0200


 Same in fully patched W2000 Prof.

-----Mensaje original-----
De: Derek Kwan [mailto:Derek () Kwan ca]
Enviado el: jueves, 08 de julio de 2004 0:58
Para: vuln-dev () securityfocus com
Asunto: Re: help:// protocol in Windows XP Prof


In fact, you can try any h{a-z}{a-z}p://  will work...

D

<Quote> Bartosz Kwitkowski</Quote>


 There is funny thing in Internet Explorer 6.0 - Windows XP Professional
(fully patched).

 When you are writing address in IE you can replace http:// by help://

 example:

 http://wb.pl/bartosz = help://wb.pl/bartosz

and than hit <ENTER>... Page will open...

 other...

 help://www.securityfocus.com - looks funny, isn't? :-)

 when IE opens page changes help:// to http://

 BUT, BUT,

 when you are create hyperlink <a href="help://wb.pl/bartosz">check</a>

 it won't work - IE says syntax error...

 I'm trying to exploit this...

 Best regards,
 Bartosz Kwitkowski




Current thread: