full-disclosure - Does your IE6 crash with these "URLs"?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: dos_cerveza at mail.com (dos cerveza)
Subject: Does your IE6 crash with these "URLs"?

The first confirmed.
The html does not crash my IE.
The META REFRESH did.
And also a body onload= crashed it.
Both local and remote.
Remote tests:
http://62.131.200.99/eastwood/browser/crashing.htm (body onload)
http://62.131.200.99/eastwood/browser/crashed.htm(meta refresh)

IE version: 6.0.2800.1106
Win2K SP4 
 > I have a question. I would like to know, if you can also crash 
 > IE6, when typing the following "URL":
 > 
 > ftp*://?
 > 
 > I have also tried from HTML like this:
 > 
 > <html>
 > <body>
 > <script language="JavaScript">
 > window.open("ftp://ftp*://?");
 > </script>
 > </body>
 > </html>
 > 
 > I could crash IE about a year ago with the first "URL" above 

-- 
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup

CareerBuilder.com has over 400,000 jobs. Be smarter about your job search
http://corp.mail.com/careers