Vulnerability Development mailing list archives
Re: Problem in IE's File Type Recognition
From: pgut001 () cs auckland ac nz (Peter Gutmann)
Date: Wed, 26 Jul 2006 16:32:30 +1200
knight4vn () yahoo com writes:
I found out one way to make Internet Explorer ver 6.0 recognize incorrectly type of any particular files. E.g one file named "abcd.exe" is Application type but we can force the IE browser to understand that file is "Image/JPG" or "Image/Gif" and so on ..
Isn't this well-known? Because so many sites incorrectly identify content, MS made IE able to dig into content to recognise the true type in order to make broken sites "work". There's a config option buried somewhere deep down where you can turn this "intelligence" off ("Open files based on content, not file extension"), but it's enabled by default. Peter.
Current thread:
- Problem in IE's File Type Recognition knight4vn (Jul 25)
- Re: Problem in IE's File Type Recognition Peter Gutmann (Jul 26)
- Re: Problem in IE's File Type Recognition mikeiscool (Jul 26)
- RE: Problem in IE's File Type Recognition Arian J. Evans (Jul 27)