full-disclosure - Internet Explorer 6 DoS Bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: th at zeno.com (Troy)
Subject: Internet Explorer 6 DoS Bug

On Mon, 7 Jul 2003 18:25:01 +0200, fabian.becker2@...st.de wrote:

> Hi,
> I found a bug in IE6 ?n Windows XP with all Service Packs and Patches installed:
> If you enter C:\aux in the adressline of the IE (not EXPLORER, InternetExplorer)
> and hit enter, the window will freeze. This bug is simmilar to C:\con\con
> but not as dagerous. But its the same reason, naimly that windows trys to
> open aux, a hardware device in earlier windows versions.
> I already sended an email to Microsoft but they said the bug wouldn't exist.

I reproduced this in 2K and Me as well. In Me, the freeze was
particularly bad, as even Windows Explorer locked up. 2K recovered much
more nicely.

It sounds like MS is taking the "Neo approach" to this by saying "there
is no bug."

-- 
Troy