1

When using Chrome and I select a file for upload on a website that accepts files, a Windows dialog box appears for me to select a file.

I can then paste a URL address for a file in the dialog box, and explorer.exe then invokes a process to download the file to a temporary folder, and then upload the file from the temporary folder to the website.

I think explorer.exe invokes Edge, judging by the temporary files location of subsequent upload dialog boxes remembering the last used folder.

Can a maliciously encoded url use a malformed 'filename' (what windows interprets) in the url to somehow impact the explorer.exe process or Windows filesystem nefariously?

Can this access be contained within Edge's browser cache or can it go further with a carefully designed filename?

Once the filename becomes local, is the process running with local zone privileges?

New contributor
laughing muppet is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • I cleaned up your post but the 2nd to last paragraph was very difficult to understand. I think you missed a word. Can you edit your post to make sure it says what you intended? – schroeder 2 days ago
  • In general, just accessing a file does not run it, so downloading and uploading won't affect your machine. – schroeder 2 days ago
  • i guess the only way would be if the filename length exceeds ntfs limits, and then ends up overwriting the next sectors – laughing muppet 2 days ago
  • Can that happen? – schroeder 2 days ago
  • "Once the filename becomes local, is the process running with local zone privileges" - this question makes no sense. What process? – schroeder 2 days ago

Your Answer

laughing muppet is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.