New phishing tactic falling through the net

John Wilcock john at TRADOC.FR
Tue Feb 22 12:49:32 GMT 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Julian Field wrote:
> patch attached which implements this trap. That was a
> toughie, took me 45 minutes!

Not sure whether you're being sarcastic about the toughness or not :-)
Anyway, it doesn't seem to be working properly.

I sent it the following (telnetting in and making it up as I go along!):

> <a href="">
> <map name="mymap"><area coords="0,0,100,100" shape="rect"  href=""></map>
> <img src="http://whatever" usemap="#mymap"></a>

MS clearly noticed *something*, because there's an extra </map> in what
I got back:

> <a href=""></map>
> <map name="mymap"><area coords="0,0,100,100" shape="rect"  href="">
> <img src="http://whatever" usemap="#mymap"></a>


-- Over 2500 webcams from ski resorts around the world -
-- Translate your technical documents and web pages    -

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ ( and
the archives (

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list