full-disclosure - Revisited Internet Explorer 6 DoS Bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <37C2E624CEE7114496FC433FA8AC6F24651B21@exchangeokc.bancfirst.com>
From: jeberly at bancfirst.com (Jason Eberly)
Subject: Revisited Internet Explorer 6 DoS Bug

  Windows XP Professional, 5.1.2600 SP1
  IE 6.0.2800.1106.xpsp2.030422-1633
  US English, plus East Asian language support.
  MS Outlook 2002 (10.2627.2625)

  I thought it might be fun to test how Outlook handled this, so I
created a simple message and sent it to one of our E-mail
administrators.  The HTML formatted message, of course, contained a
single line of text ("does this crash your mail client?") and the <img
src ...> link from below.

  Crashed nicely, had to kill Outlook to recover.  What's even funnier
is he had his Inbox set on 'auto preview' ... tsk! tsk!  As a result,
subsequent restarts of Outlook would also hang up.  We had to tinker
around with Outlook Web Access (bleh!) to finally get rid of it (no auto
preview, or at least not by default I think.)

  This would be super annoying if our users were getting DoS'd by it.
Perhaps if nothing else it will encourage our E-mail admin not to run
Auto Preview, heh!

 - Jason Eberly

-----Original Message-----
From: Peter Kruse [mailto:kruse@...sesecurity.dk] 
<snip>
This attack can also be conducted with HTML based e-mails.
<yup!>