full-disclosure - Internet Explorer 6 DoS Bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: BlueBoar at thievco.com (Blue Boar)
Subject: Internet Explorer 6 DoS Bug

fabian.becker2@...st.de wrote:
> I found a bug in IE6 ?n Windows XP with all Service Packs and Patches installed:
> If you enter C:\aux in the adressline of the IE (not EXPLORER, InternetExplorer)
> and hit enter, the window will freeze. This bug is simmilar to C:\con\con
> but not as dagerous. But its the same reason, naimly that windows trys to
> open aux, a hardware device in earlier windows versions.

Cannot reproduce your results, at least not for my definition of "freeze". 
  Tested on WinXP Pro with all patches and IE updates provided by Windows 
Update.  IE simply displays a blank page.  CPU is not pegged, IE functions 
notrmally (I can open another page from there, for example.)

						BB