full-disclosure - Does your IE6 crash with these "URLs"?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: security at dylanic.de (Michael Renzmann)
Subject: Does your IE6 crash with these "URLs"?

Hi.

Martin wrote:
 > I have a question. I would like to know, if you can also crash
 > IE6, when typing the following "URL":
 >
 > ftp*://?

I can confirm that problem. When opening the mentioned URL, IE6 
(6.0.2800.1106) reports the following "problem signature":

AppName: iexplore.exe	 AppVer: 6.0.2800.1106	 ModName: msieftp.dll
ModVer: 5.50.4807.2300	 Offset: 0000b8bc

OS is Win2k SP2.

Bye, Mike