> -----Original Message-----
> From: Brian Eaton [mailto:[EMAIL PROTECTED]
>
> Yes. Several people have written javascript fuzzers and made various
> javascript engines crash and burn, but a lot of that research only
> happened in the past couple of years. VBScript is nearly as
> omnipresent, but has received less attention. I suspect it would be
> fertile ground. Maybe Microsoft has done the work to harden VBScript
> internally. It's hard to tell.
Afaik, Jscript and VBScript internals share a lot of things wrt the
browser interfaces, and objects available. Since both runtime engines
use COM in very similar ways... If you can't instantiate a COM object
through "new ActiveXObject('id')" in JS, you probably can't in VBS
either.
The scripting engines don't themselves provide storage access, this
Is done via COM libraries, which generally aren't marked as safe for
Scripting in a browser... The JET/Access connector was for a while,
Which was used by some scripted attacks.
Other than this, and some issues with Flash's engine (especially
earlier versions), it's been relatively stable. Personally, I don't
see much point of VBS.... and never really cared for it.
--
Michael J. Ryan -- Software Developer -- Apollo Group
This message is private and confidential. If you have received it in error,
please notify the sender and remove it from your system.
