bugtraq - Re: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <003401c437bc$a5d33c40$844317ac@msrchina.research.microsoft.com>
Date: Wed, 12 May 2004 09:01:20 +0800
From: "Gao Rui" <gaorui@...osec.pku.edu.cn>
To: "Rafel Ivgi, The-Insider" <theinsider@....net.il>,
	"bugtraq" <bugtraq@...urityfocus.com>
Subject: Re: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh


I tried your example, but nothing happens
My system information:
IE version: 6.0.2800
Module name: msxml3.dll


Best Regards,
Gao Rui
gaorui@...osec.pku.edu.cn
Network & Information Security Lab, Dept. of Computer Science
Peking University, Beijing, 100871, China


----- Original Message ----- 
From: "Rafel Ivgi, The-Insider" <theinsider@....net.il>
To: "bugtraq" <bugtraq@...urityfocus.com>
Sent: Tuesday, May 11, 2004 2:27 AM
Subject: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon
Refresh


> msxml3.dll crashes after refreshing a page which contains & inside a
> link/value
> For Example : <Ref href = "&"/>
> This is due to a parsing error in msxml3.dll.
>
> Version Details:
> ---------------------
> I.E Version: 6.0.2600.0
> ModVer: 8.10.8308.0
> Module name: msxml3.dll
> Offset: 000b8c10
>
> Stack Dump:
> -----------------
> EAX=01CEE800
> EDI=01D02580
> EBX=00000000
> EBP=02C3F3E4
> ECX=00000000
> ESP=02C3FC74
> EDX=02D91364
> EIP=02E18C10
> ESI=00000000
> DS:00000004     GS:0000     ES:0023     SS:0023     CS:001B
>
> Live Example:
> http://theinsider.deep-ice.com/xmlcrash.xml
> AND REFRESH...
>
>