full-disclosure - Crash IE with 11 bytes ;)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: staylo at agccs.lmco.com (Stephen Taylor)
Subject: Crash IE with 11 bytes ;)

Made a mistake. I just tried with Mozilla Firefox 0.9 again and it's works
fine.  The symbol in the URL window is from E-CQURITY. It's obviously their
logo. Didn't visit that site before. --ST

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Arjun
Pednekar
Sent: Monday, July 26, 2004 7:44 AM
To: staylo@...cs.lmco.com; 'Phuong Nguyen'; 'Marcel Krause'
Cc: full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] Crash IE with 11 bytes ;)

Yeah about:<input%20type%20crash> did crash IE, on my win 2K system.

Even the following works in IE (not in Mozilla/5.0)

about:<script>alert('HI')</script>

arJun

****************************************************************************
The information in this email is confidential and may be legally privileged.
Access to this email by anyone other than the intended addressee is
unauthorized.  If you are not the intended recipient of this message, any
review, disclosure, copying, distribution, retention, or any action taken or
omitted to be taken in reliance on it is prohibited and may be unlawful.  If
you are not the intended recipient, please reply to or forward a copy of
this message to the sender and delete the message, any attachments, and any
copies thereof from your system.
****************************************************************************

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Stephen Taylor
Sent: Saturday, July 24, 2004 1:20 AM
To: 'Phuong Nguyen'; 'Marcel Krause'
Cc: full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] Crash IE with 11 bytes ;)

I don't understand the effect it has on Mozilla.  It certainly crashed my IE
but for Mozilla, the URL window displayed a diamond shape with a red "X"
through it. Mozilla was unresponsive afterwards. I had to close the window
to recover.  I am a W2K user at work.
ST

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Phuong
Nguyen
Sent: Friday, July 23, 2004 1:49 PM
To: Marcel Krause
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Crash IE with 11 bytes ;)

Oh, I actually didn't know about that! Coolio ;) !!

Phuong

At 12:47 AM 7/24/2004, Marcel Krause wrote:
>Hi!
>
>There is a similar Bug using about:<input%20type%20crash> .
>Well i think that's old news to you :)
>
>Yours, Marcel

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html