Funny link (Internet Explorer only though)

[The PIT]

Bet it confused a few people though.

[Chrono_Wanderer]

well.. it's MURC The Lounge... what's there except for things to confuse you

[Jon P. Inghram]

Yeah, although cd's magicly ejecting out of drives, and browsers crashing probably excedes the normal confusion limit.

[Gurm]

Actually WMP9 says... "this file seems to be of the wrong type for its extension, are you sure you want to view it?"

Or something like that.

Maybe MS is aware of the problem after all.

- Gurm

[Technoid]

the question is not if they are aware, the question is: Do they care ?

[High_Jumbllama]

Originally posted by Gurm
Actually WMP9 says... "this file seems to be of the wrong type for its extension, are you sure you want to view it?"

Or something like that.

Maybe MS is aware of the problem after all.

- Gurm

The problem is Internet Explorer not realizing the difference. Also, the Media Player activeX control should not allow a command from the web to do such a thing.

[Jon P. Inghram]

It's not even activex, it's just a vbscript. On Win98 if I try to copy that link into WMP9 it just says "Class not regsistered."

[High_Jumbllama]

It's vbscript masquerading as a JPEG that accesses WMPlayer.OCX.7 This can be seen in the source.

[Jon P. Inghram]

Well, no point worrying about letting the cat out of the bag... I did a google search for WMPlayer.OCX.7 and it seems that "exploit" has already made the rounds.

[Pace]

So, the real problem is not Internet Explorer not realising the difference, but that Windows relies on file extensions

So, even by stopping VBS files, VBScripts can still be run