[Mimedefang] Browser Bug: Very bad in IE and varies on Netscape and Mozilla

[alan premselaar]

On 12/20/03 7:12 AM, "Kevin A. McGrail" <kmcgrail at pccc.com> wrote:

> WARNING: There is documentation of a scam in this document.  Read the
> document, don't feel the need to click on things!
> 
> Not to alarm everyone, but I feel that there is a bug/scam that more people
> need to know about that I found out about last week.  This bug causes some
> browsers, notably Internet Explorer but ALSO AFFECTING NETSCAPE AND MOZILLA
> TO SOME EXTENT, to parse web links incorrectly and allow a person to nearly
> perfectly cover up the fact that they are redirecting you to a different
> link.
...snip... 
> http://www.paypal.com%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01
> %01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01
> %01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01
> %01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01
> %01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01
> %01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01%01 at netcbc.net/paypal/
...snip... 
> I would recommend forwarding this information to people you feel can
> properly handle the information but I think this is going to very quickly
> become the largest scam tool on the internet.
> 
> Regards,
> KAM


Just an FYI:

  I've tested this on 3 different browsers on Mac OS X and it fails in all
of them.

Also, I find it helpful to view the mail source of any mail I get from any
service that seems even the slightest bit fishy. (or phishy as the case may
be)  I tend to be fairly skeptical anyways, but I think it's a good habit to
get into.

(hope someone finds this information useful)

alan