Vulnerability Development mailing list archives

help:// protocol in Windows XP Prof


From: Bartosz Kwitkowski <bartosz () wb pl>
Date: 6 Jul 2004 09:36:16 -0000



 There is funny thing in Internet Explorer 6.0 - Windows XP Professional (fully patched).
 
 When you are writing address in IE you can replace http:// by help:// 
 
 example:
 
 http://wb.pl/bartosz = help://wb.pl/bartosz

and than hit <ENTER>... Page will open...
 
 other...
 
 help://www.securityfocus.com - looks funny, isn't? :-)
 
 when IE opens page changes help:// to http://

 BUT, BUT,

 when you are create hyperlink <a href="help://wb.pl/bartosz">check</a>

 it won't work - IE says syntax error...

 I'm trying to exploit this...

 Best regards,
 Bartosz Kwitkowski



Current thread: