it a known exploit.
----- Original Message -----
Sent: Sunday, June 22, 2003 7:42 PM
Subject: [Full-Disclosure] (no subject)

Hi,

    I just accessed a page which ejects my CD-ROM tray. Is this consider privacy or security breaching? I'm no expert on pertinent subject. For me, i don't like ppl be able to fool around with my CDROM tray when i open their website. Any comments? Thanks.

    I checked the site and it contains :

<SCRIPT language=VBScript>
<!--
Set oWMP = CreateObject("WMPlayer.OCX.7" )
Set colCDROMs = oWMP.cdromCollection
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next ' cdrom
End If
-->
</SCRIPT>

Take care,

muhstik


Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!

Reply via email to