adding an extension of "Send page by email..."

PeterInMn

unread,

Apr 3, 2006, 11:57:12 PM4/3/06

to

Hi all.
I would like to to find an extension, or even make one, that will add
functionality of sending a web page by email. This extension would take
the displayed web page, and copy it, or attach it as a web page
attachment, to a pop mail message brought up in TB. This is found in,
ugh, IE and OE, but also in Mozilla Suite. I would like to have this
for the package FF and TB that can be used in concert. Many of us use
FF and TB as a suite/sweet package. Is this extension already
available? Anybody else interested in this type of extension?

Ken Wagner

unread,

Apr 4, 2006, 5:06:30 PM4/4/06

to

This was discussed about a year ago on the secnews server. According to
http://www.mozilla.org/projects/security/known-vulnerabilities.html , a
vulnerability was fixed in Firefox 1.0PR, Mozilla 1.7.3, and Thunderbird
0.8 regarding the "send page" menu option. My guess at the time was
that the "fix" was to convert "Send Page" menu option into the "Send
Link" option.

The issue revolves around remote code execution. The URL listed above
says: "The 'send page' function can overrun the heap on very long links.
With compelling content that people will want to forward to all their
friends and the right link this could be used to execute arbitrary code.'

So, it comes down to a security issue. As such, I'd be surprised if
someone wrote an extension to get around a security issue.... but then
again, maybe someone would.

lafill

unread,

Apr 4, 2006, 7:10:02 PM4/4/06

to

See if this suits your needs.

http://jkn.com/?v=fj115

Matt Nordhoff

unread,

Apr 5, 2006, 4:47:41 PM4/5/06

to

On 04/04/06 17:06, Ken Wagner wrote:
> The issue revolves around remote code execution. The URL listed above
> says: "The 'send page' function can overrun the heap on very long links.
> With compelling content that people will want to forward to all their
> friends and the right link this could be used to execute arbitrary code.'

That wouldn't cause them to convert 'Send Page' to 'Send Link'; in fact,
from your quote, it should apply completely to Send Link. That would
just cause them to fix it so it doesn't freak out on long URLs. :-P
--
Matt Nordhoff
(aka Peng on IRC & the forums)

PeterInMn

unread,

Apr 5, 2006, 11:29:35 PM4/5/06

to

Lafill,
Jkn.com is not bad. I already have it on my FF browser. My problem
with it is that, even though it is free, it is commercialized, with the
requests for adds, it is a little clunky, in that I need to add in my
email address, though I suppose I could have the site remember me. Let
me ask, do you use it much? Do you send pages much? I think another
issue that bothers may about jkn.com is that the pages are not saved on
my own hard drive, though I think I could send the email to myself at
the same time. Any comments?
Peter

lafill

unread,

Apr 6, 2006, 6:21:56 PM4/6/06

to

I don't use it very often and when I do the "this page option" often
fails for some reason that I haven't looked into. Otherwise, I can
overlook the shortcomings you mentioned because, as I said, I don't use
it all that much. Good luck with your quest.