From: adam beecher (adam at domain iewebs.com)
Date: Tue 09 May 2000 - 15:07:09 IST
> > > yep -- if you have the preview window enabled, it's run automatically.
> >
> > I don't think so. The danger with the preview window is that HTML
> > is rendered automatically, and this HTML could contain malicious
> > <SCRIPT>, <APPLET> or <OBJECT> tags.
>
> er... maybe I'm wrong alright, getting it confused with another worm.
> Thought I saw that in one of the bugtraq mails, and I can't seem to track
> it down now.
>
You are - if you run Outlook with the preview window, the attachment just
appears, ummm.. attached (sorry) to the preview pane - it's not run
automatically. You are open to html scripting though, and so java applets and
everything else mentioned above, but there's ways around it. Which I have to
figger out again since I "borrowed" a copy of Office 2000 Upgrade. :)
Only time I ever got screwed up because of the preview pane was when a spammer -
grrrr again - sent a message in a weird charset, which caused Outlook to stop
and hang. Problem was, it was the first email in the Inbox, which is
automatically highlighted on startup. I had to move the PST file, open another
one, export everything from the old one bar messages with the subject line of
the spam message and change it all back again. Very annoying. :)
The best thing I've come across so far about Outlook 2000 though, is that when
you're installing the upgrade without a previous version installed, it pops up
an error message telling you that "there are no qualifying products" on the
machine. It then prompts you to point to the location of the product. A friend
pointed out to me, however, that if you point it back at the cd-rom, it'll see
itself as a qualifying product, and happily install away. How stupid is that? :)
adam
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:06:04 GMT