bugtraq - Microsoft IE iframe src DoS already reported to Microsoft

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Thu, 08 Apr 2004 13:46:20 -0400
From: "'ken'@FTU" <ken@...security.com>
To: bugtraq@...urityfocus.com
Cc: secure@...rosoft.com
Subject: Microsoft IE iframe src DoS already reported to Microsoft

Security Professionals,

On Wednesday, April 7, 2004, Emmanouel Kellinis reported to Bugtraq that
the following HTML tag would cause IE to crash:

<iframe src="?">

Please see post:
http://www.securityfocus.com/archive/1/359767/2004-04-05/2004-04-11/0

I discovered this bug in January 2004 and reported it to Microsoft on
January 28, 2004.

After working with Microsoft, I decided to wait until the bug was fixed
before announcing it. In my opinion, this is part of responsible
disclosure.

I hope Microsoft will publicly reply to this post and confirm that I was
the individual who originally reported the bug to them.

'ken'@FTU

-- 
====================================
    http://www.ftusecurity.com     
  Serving Straight HTML Since '02
====================================