WE'RE NOT QUITE certain what's going on here, but there appears to be a fresh hole in Internet Explorer that lists all the files on your hard drive, perhaps to all and sundry
I guess it could be considered a security hole. But its not new, I've seen this back in like '97. I guess that was in IE 3.0 back then. Thats probably a "feature" in IE we could do without
I don't think this can be exploited as a hack - it only shows YOUR drive when you execute that code.
It only works because IE and Windows Explorer are really one and the same beast. You can browse any local drive from IE - just type C:\ in the URL window.
---
“The Government of Spain will not applaud those who set the world on fire just because they show up with a bucket.” - Prime Minister of Spain, Pedro Sánchez