Re: KaZaA

From: Alex Lambert (alambert@webmaster.com)
Date: 10/18/02


From: "Alex Lambert" <alambert@webmaster.com>
To: "David Krum" <frobnitz@msn.com>, <bugtraq@securityfocus.com>
Date: Fri, 18 Oct 2002 15:55:57 -0500


Kazaa's IE control (at least in 1.7.x) seems to treat certain URLs
differently, too, which could pose a problem. For example,
http://localhost/KazaaSearchQuery performs a search (a form for this is
displayed on desktop.kazaa.com). Putting more than 272 bytes into the query
argument causes a crash; I haven't checked if it's posisble to run malicious
code with this.

apl
----- Original Message -----
From: "David Krum" <frobnitz@msn.com>
To: <bugtraq@securityfocus.com>
Sent: Friday, October 18, 2002 11:33 AM
Subject: KaZaA

> I'm concerned about all the applications which utilize ie browser
controls.
> There are a lot of adware programs with little ads. Some of these ads
have
> activex, java, flash, js. Any one of these capabilities in the wrong zone
> could be dangerous.
>
> My attention was first drawn to this when I noticed KaZaA launching popups
> sourced from the local hard disk. Surely these ads are running in the
local
> zone. To use software that does this I have to trust them to audit the
ads
> given to them?
>
> _________________________________________________________________
> Broadband? Dial-up? Get reliable MSN Internet Access.
> http://resourcecenter.msn.com/access/plans/default.asp
>
>



Relevant Pages

  • Re: 9/11 -- 2001 To 2008
    ... Moveon.org and other sources because GWBush can't control them. ... use of images from the tragedy in montages in the ads, ... to air ads by MoveOn.org, just because the Republicans did not want ...
    (rec.arts.tv.soaps.cbs)
  • 9/11 -- 2001 To 2008
    ... Moveon.org and other sources because GWBush can't control them. ... use of images from the tragedy in montages in the ads, ... to air ads by MoveOn.org, just because the Republicans did not want ...
    (rec.arts.tv.soaps.cbs)
  • Re: [SLE] Not So Fast: Linux on the Desktop
    ... > be configured to give you a lot of control but with ads, ... > without ads. ... to Linux, I'll use KMail. ... An American Patriot who hated Communism and Socialism, ...
    (SuSE)
  • Re: Buying Adobe Elements?
    ... who rents PS if they ever get subjected to ads, ... chain movie theaters have an entirely different business model than ... letting Adobe charge them for that intrusion monthly. ... Adobe now claims a right to control the software as it's ...
    (rec.photo.digital)
  • Re: [SLE] Not So Fast: Linux on the Desktop
    ... >> be configured to give you a lot of control but with ads, ... >> without ads. ... > to Linux, I'll use KMail. ... I have Agent running under wine on my 8.2. ...
    (SuSE)