<div>Hello, all.<br><br>I just received an email with an html attachment, on a yahoo account.<br><br>When I opened the mail, yahoo automatically displayed the html, and executed the code within. What the hell. =) It forwarded the message to my contacts list, (or some other set of addresses, dunno,) and redirected my browser to a website.
<br><br>I'm of to a BBQ, and I don't care about yahoo. So I'm not even going to read the code and see how this happens. I'm attaching the html file as a text file. Enjoy!</div>
<div> </div>
<div>Oh, I've CC'd <a href="mailto:abuse@yahoo.com">abuse@yahoo.com</a>, but if someone else would give them a proper write-up, and encourage them to close the hole, that'd be wonderful.<br> </div>
<div>Cheers,</div>
<div>--David Loyall<br>Omaha, Nebraska<br><a href="http://david.loyall.googlepages.com">David Loyall</a></div>