Running command.com from within Netscape's MIME dialog box

[Mark Cyzyk]

I was greatly distressed by Bill Moseley's recent post regarding running
command.com from within Netscape's MIME dialog box.  It certainly appears that
this is a way to break into a DOS shell even if a security program like Ikiosk
is locking out dangerous menu items.

However, I found that if the attributes for the netscape.ini file are set to
read-only, Netscape will indeed first boot up the familiar MIME box, but upon
writing to the ini file (and being unable to do so) it will merely prompt the
user for a location in which to save the file.  In this way, no executables are
run via the MIME dialog box.

Hope this helps,

Mark Cyzyk
Towson State University