Funny link (Internet Explorer only though)

**High_Jumbllama** · 13 May 2003, 07:07

What?

It's just a JPEG file.

**Jon P. Inghram** · 13 May 2003, 07:09

Did you have a CDROM in a drive?

**GT98** · 13 May 2003, 07:16

Duh!

**High_Jumbllama** · 13 May 2003, 07:19

Great!

(not at you)

ANother mishandling of Internet Explorer. How many days until this is exploited in some malicious way. Even though the file has a JPEG extension it acts like html.

**High_Jumbllama** · 13 May 2003, 07:22

It still did nothing, but then again I have everything patched.

**Jon P. Inghram** · 13 May 2003, 07:29

I'll remove the link, didn't think about the negative aspects of it... I assumed it was just a stupid IE trick, like the one that makes it look like a site has a copy of the contents of your HD or something.

**High_Jumbllama** · 13 May 2003, 07:33

The link implements a flaw in Internet Explorer but it only does something humorous and fortunately not malicious. I think you need Media Player 7 for it to happen. Could you PM me the link? I wanna see something.

**Jon P. Inghram** · 13 May 2003, 07:46

PM sent. I've got MP9, Win98 SE, IE 6 with all the patches. Might not work if you have more than one CD/DVD drive though, or might only work with one drive.

**High_Jumbllama** · 13 May 2003, 08:03

Works with multiple drive Media Player Seven with all the patches. The bad points are:

Internet Explorer allowing the user to be tricked as to what type a file is.
Media Players 7 and 9 allowing a website to open your drive.

FOund it in my history. This was a problem in Outlook as well was it not?

**Jon P. Inghram** · 13 May 2003, 08:13

Just tried it in OE, didn't seem to do it then.

**High_Jumbllama** · 13 May 2003, 08:18

I meant that in Outlook 2000 something similar happened with filetypes being misrepresented. I think that was patched.

Irfanview will see a file that appears to be one type and check it. It will then ask for confirmation to open the file if it is different. I.E. would easilly be able to do the same or deny the file if it was not what it appeared to be according to user preferences.

**Jon P. Inghram** · 13 May 2003, 08:25

LOL, you can copy the vbscript that it's using and post it with a [ code ] thingy and it'll work here too.

It seems Outlook Express won't run the vbscript, so at least it's not a problem there.

**The PIT** · 13 May 2003, 08:29

Well done Jon. Whatever you done you crash IE when you open this thread. I'm now using opera to view it.

**Jon P. Inghram** · 13 May 2003, 08:32

Deleted it, sorry about that Pit!

Funny link (Internet Explorer only though)

Funny link (Internet Explorer only though)

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment