lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 15 Feb 2005 23:08:26 +0100
From: "Berend-Jan Wever" <skylined@...p.tudelft.nl>
To: "ViPeR" <viper31337@...oo.co.in>
Cc: <bugtraq@...urityfocus.com>
Subject: Re: IE6 SP1 - Click N Crash is old news


> Discovered by : Gregory R. Panakkal
Incorrect: E.Kellinis reported it on Friday, May 07, 2004 to bugtraq:
http://www.securityfocus.com/archive/1/362524/2004-05-06/2004-05-12/0


> Pointing a link to the URI -> file://!:\ [replace !
> with the character with ascii value for eg:- 0xA0].
> Causes IE6-SP1 to crash, the illegal op occuring in
> user32.dll. Other special characters are also
> possible.

More details can be found here:
http://lists.netsys.com/pipermail/full-disclosure/2004-May/021272.html
http://lists.netsys.com/pipermail/full-disclosure/2004-December/030115.html

                        .-----------------------------------,
                       / Berend-Jan Wever aka SkyLined       )
                      / skylined@...p.tudelft.nl            / \
                     / http://www.edup.tudelft.nl/~bjwever /  /
                    / PGP key ID 0x48479882               /  /
                   / .----.            ,                 /  /
                  / (      '  /       /  .     __   __/ /  /
                 /   `'-._   /.' | / /  / ( / /_.'.' / /  /
                (         ) / )  |/ /  / / ) (__ (__/ /  /
                 \-------' ------` '-----------------<  /
                  \______.`\______\/\_________________\/



Powered by blists - more mailing lists