Re: Rather large MSIE-hole

From: The Blueberry (acr872k@hotmail.com)
Date: 03/15/02


From: "The Blueberry" <acr872k@hotmail.com>
To: sl2sho@yahoo.com, vuln-dev@securityfocus.com
Date: Fri, 15 Mar 2002 00:48:58 +0000

Well you could pipe commands by "echo.something>somefile" but to place many
words on a line you would have to use debug and edit manually the file, byte
by byte... but with a lot of patience I believe you could do it. But another
thing is that ie will block those parameters even if there is no space
because the program is used as an ActiveX... I really do not know any way of
doing something without parameters and without writing anything to disk.

-TB

>In-Reply-To:
><9956F8424795D411B03B0008C786E60D048D0A7B@DUBNTEX005.qwest.net>
>
>::responses to multiple people bleow::
>
> >Eric Brown Wrote
> >Could you not create a batch file that housed the
>commands you wanted to run
> >(with args) and just run the batch file?
> >I apologise if someone has already addressed this.
>
>how would you make this batch file? the only way I
>know would be to use "echo blah >> file.bat" and if
>you do it that way you are still using parameters...so
>we are right back to where we started.

_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com



Relevant Pages

  • Re: Utility to reset LPT1
    ... > port the system reports `cd rom not found' although its drivers ... You could try using DEBUG to call INT 17, ... Batch file troubleshooting: http://www.allenware.com/find?UsualSuspects ...
    (comp.os.msdos.misc)
  • Re: Batch file wont finish installing security updates
    ... Local security policy> User Rights Assignment> Debug ... Admin rights, bounced the box, the batch file ran fine. ... On all the rest of my machines ...
    (microsoft.public.win2000.security)
  • Re: Execution of batch file from VC++(IDE)
    ... Actually I was trying to do the very same thing today, ie: debug an exe ... The page entitled "launching the debugger ... >>I am having one batch file and using this I can start my Server. ...
    (microsoft.public.dotnet.languages.vc)