lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Sat, 28 May 2005 16:24:20 +0200
From: "Benjamin Tobias Franz" <>
To: <>
Subject: Microsoft Internet Explorer - Crash on adding sites to restricted zone (05/28/2005)

Microsoft Internet Explorer - Crash on adding sites to restricted zone

There is a bug in Microsoft Internet Explorer, which causes a crash in
- EventType : BEX - P1 : IEXPLORE.EXE - P2 : 6.0.2900.2180
- P3 : 41107b81 - P4 : urlmon.dll - P5 : 6.0.2900.2627 - P6 : 422fff74
- P7 : 0005bf61 - P8 : c0000409 - P9 : 00000000
The bug occurs, because Microsoft Internet Explorer can't handle adding of
special-formed URLs to restricted zone. To get a crash, the URL must begin
with numbers and dots (like a correct IP address), but it mustn't end like a
IP address.

Affected software:
Microsoft Internet Explorer

Don't add such URLs to any zone.

Proof-of-Concept exploit:
Add to restricted zone:

Date of discovery:
20. April 2005

Tested software:
Microsoft Internet Explorer 6 SP2 (6.0.2900.2180.xpsp_sp2_gdr.050301-1519)
on a fully patched Windows XP SP2 system.

DLL versions:
MSHTML.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648)
BROWSEUI.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648)
SHDOCVW.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648)
SHLWAPI.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648)
URLMON.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648)
WININET.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648)


Benjamin Tobias Franz

Powered by blists - more mailing lists