Re: Linux, too, sot of (Windows MS-DOS Device Name DoS vulnerabilities)

[Jeffrey W. Baker]

On Wed, 18 Jul 2001, Ishikawa wrote:

> The next is a showstopper.
> The problem URL that caused the hung of browser,
> at least, on my PC is the following.
>
>     file:///dev/pty0
>
> This locked my netscape navigator solid.
> I had to kill it using kill command from another
> xterm window. X didn't get hung, etc..
> Since trying other devices may cause more severe problems
> I stopped testing here.

Using <img src="file:///dev/tty0"> on my Linux machine caused Netscape and
Mozilla both to eat all the keyboard input.  I had to use another machine
to kill it.  I expected Netscape to NOT open file URIs from within a page
fetched via !file (http, https, ftp, gopher, etc.).

-jwb