full-disclosure - Internet Explorer 6 DoS Bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <00da01c344e1$1e706a80$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: Internet Explorer 6 DoS Bug

Does an HTML IMG tag like <img src=c:\aux> also cause a crash?  This
kind of tag can be embedded in an HTML email message.  If the bug shows
up also in an IMG tag, then an Email reader like Outlook or Outlook
Express can be DoSed.  Ditto for Hotmail and Yahoo mail.

Richard

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Dan
Williams
Sent: Monday, July 07, 2003 4:50 PM
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Internet Explorer 6 DoS Bug


I am running US version of  XP corporate with the latest service packs
and
updates with IE 6.0.2800  and the c:\aux crashes that specific browser
window along with clicking a click to href=c:\aux

....

--Dan

> pez dude wrote:
> > Tested and confirmed on Inter Explorer Version:
> > 6.0.2600..0000.xpclient.010817-1148
> >
> > Window locks and can be closed with Ctrl +Alt+ Delete or by clicking
the
> > x in the top right corner ...   followed by an "end now" or "cancel"
> > prompt.
>
> So far the couple of people who CAN reproduce it are coming from a .dk
and
> .de domain.  I use the US English version of XP.  If anyone else
chimes in
> on whether they can reproduce or not, could you please report what
language
> version of XP and/or IE you use?
>
> Has anyone tried it from a link in a page, or a refresh or anything?
>
> BB
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html