full-disclosure - for IE researchers, found a link crashing IE

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue Nov  1 18:23:00 2005
From: ad at class101.org (ad@...ss101.org)
Subject: for IE researchers, found a link crashing IE

So in the case of the website go off or remove the webpage, attached is the
saved page also crashing IE while loaded offline. cheers

-----Message d'origine-----
De?: ad@...ss101.org [mailto:ad@...ss101.org] 
Envoy??: dimanche 30 octobre 2005 23:50
??: 'Greg'; 'full-disclosure@...ts.grok.org.uk'
Objet?: RE: [Full-disclosure] for IE researchers, found a link crashing IE

.....................

Look my thread here:

http://class101.org/viewtopic.php?p=1272#1272

I recall my tests..

Windows XP Professional SP1 ENGLISH 64-bit (IE32-6.0.3790.1830) -crash- 
Windows XP Professional SP1 ENGLISH 64-bit (IE64-6.0.3790.1830) -crash- 
Windows XP Professional SP2 ENGLISH 32-bit (IE32-6.0.2900.2180) -nocrash- 
Windows XP Professional SP1 ENGLISH 32-bit (IE32-6.0.2900.1106) -crash- 
Windows 2k Workstation SP4 ENGLISH 32-bit (IE32-6.0.2800.1106) -crash- 
Windows 2k Server SP4 ENGLISH 32-bit (IE32-6.0.2800.1106) -crash- 
Windows NT4 Workstation SP6a ENGLISH 32-bit (IE32-6.0.2800.1106) -nocrash- 
Windows NT4 Server SP6a ENGLISH 32-bit (IE32-6.0.2800.1106) -nocrash- 
Windows 2k3 Server Std SP1 ENGLISH 32-bit (IE32-6.0.3790.1830) -crash- =>
(silently exiting, no crash box...)

And I don?t think this is fake screenshots

http://class101.org/bug2ksp4.bmp 
http://class101.org/bugxpsp1.bmp


-----Message d'origine-----
De?: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] De la part de Greg
Envoy??: dimanche 30 octobre 2005 21:43
??: full-disclosure@...ts.grok.org.uk
Objet?: Re: [Full-disclosure] for IE researchers, found a link crashing IE


----- Original Message ----- 
From: <ad@...ss101.org>
To: <full-disclosure@...ts.grok.org.uk>
Sent: Sunday, October 30, 2005 11:55 PM
Subject: [Full-disclosure] for IE researchers, found a link crashing IE


> This link crashes my fully patched IE on
>

Unsure if this was a real bug-crash report or not but for the heck of it, 
tested it from 2 Windows boxes.

1) Win XPSP2 with IE6SP2 all fully patched and running, because I was too 
lazy to stop it running, Zone Alarm Pro (yes, I know but I like to do this 
for other reasons). No crash.

2) Networked (runs wired through the XP box as above and out of that, 
wireless to a router) 98SE machine with IE6SP2 fully patched on it. No 
crash.

Was this one an honest report or just someone having a laugh?


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: poc.rar
Type: application/octet-stream
Size: 119286 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051101/dd2588a5/poc-0001.obj