lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <00fc01c31f0b$16595380$49082150@lonestar0>
Date: Tue, 20 May 2003 22:04:54 +0200
From: "David F. Madrid" <idoru@...eosoft.net.uy>
To: <bugtraq@...urityfocus.com>
Subject: Blue screen in Windows


Issue :

Blue screen in Windows


Tested versions :

W2000 Server Sp3 with IE 6.0 Sp1
XP Pro with IE 6.0


Vendor status :

MS is investigating the issue but as they spent months to just acknowledge
it I decided to publish it


Description :

With Internet Explorer you can make calls using netmeeting ,
navigating to callto Urls . On the systems tested if you try to
navigate to a specially crafted callto url Windows halt with a
Kmode exception not handled . I can´t reproduce this always,
particulary not after rebooting from the system halt , but the issue
was confirmed in two different computers .

I am afraid I can´t give any debugging info cause no causing module is
shown in the BSOD .


Exploit :

In the spanish version of this advisory you can find a demonstration

http://nautopia.org/vulnerabilidades/callto_bluescreen.htm

Just click the link "Pulsa aquí para parar Windows"


Regards ,

David F. Madrid ,
Madrid , Spain



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ