full-disclosure - IE Crash - Anyone Seen This Before?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: SkyLined at edup.tudelft.nl (Berend-Jan Wever)
Subject: IE Crash - Anyone Seen This Before?

NULL pointer assignment in mshtml, not exploitable.
636D54AF    8B48 2C         MOV     ECX, [EAX+2C]
EAX = 0, Bad read of address 0x0000002C.

Cheers,
SkyLined
----- Original Message ----- 
From: "Mike Mauler" <cryptic_mauler@...uxmail.org>
To: <full-disclosure@...ts.netsys.com>
Sent: Friday, May 14, 2004 15:55
Subject: [Full-Disclosure] IE Crash - Anyone Seen This Before?


>
> <script type="text/javascript">
> Wnd = window.createPopup();
> Wnd.document.body.innerHTML='<meta http-equiv="imagetoolbar"
content="no">';
> </script>
>
>
>
> It crashs the latest IE with all patches. Dont see why it only seems to
work for me with only that META tag. Has anyone seen this before with other
tags or the same bit of code?
>
>
> Regards,
> Nick
> -- 
> ______________________________________________
> Check out the latest SMS services @ http://www.linuxmail.org
> This allows you to send and receive SMS through your mailbox.
>
>
> Powered by Outblaze
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html