If you only have time for one windows support site, mark CTH down as your place to go. Hey it's in my favorites folder - Jethro 
Windows shortcut 'trick' is a feature: Microsoft
Posted by: Tweaker
Date added: 21:12, 5th July 2006 GMT
Source: ZDNet Australia News
Microsoft has denied that a 'trick', which could allow an executable file to be launched when a user types a Web address into Internet Explorer, is a security vulnerability.
Using Windows XP and Internet Explorer, it is easy to create a scenario where a user types in a Web address -- such as www.microsoft.com -- into their browser and instead of the launching the Web site, the browser runs an executable file that is located on the user's computer.
To test the 'trick' yourself, try the following:
-> Right click on the Desktop and create a new Shortcut
-> Point the shortcut to an executable -- such as c:\windows\system32\calc.exe
-> Call the shortcut www.microsoft.com
-> Start Internet Explorer and type "www.microsoft.com" into the address bar
-> If the shortcut is then deleted -- or the characters "http://" are added before the "www" in the browser address bar -- then IE will once again connect to the Internet as expected.
Tools: Post a comment | Link to this news item | Send to a friend | Submit News
Error: You are not logged in.
In order to leave comments to news articles you must be a Cyber Tech Help Member.
Registration is completely free! 
Register to become a member
Along with access to leave comments to news articles you will be able to ask any computing questions you might have on the Cyber Tech Help Forums.
