lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20030717103928.BC48.TH@zeno.com>
From: th at zeno.com (Troy)
Subject: Does your IE6 crash with these "URLs"?

On 17 Jul 2003 17:57:16 +0200, Martin <nakal@....de> wrote:

> Hi,
> 
> I have a question. I would like to know, if you can also crash 
> IE6, when typing the following "URL":
> 
> ftp*://?

Neat. Windows 2000, IE build 6.0.2800.1106 reproduces this. I *just*
went to Windows Update. All patches are installed. The only things left
to install at WU are the .NET framework, DX9, and Media Player 9.

I tried the sample code and made a simpler, non-Java version using a
redirect.

<HTML><HEAD>
<meta HTTP-EQUIV="REFRESH" CONTENT="0; URL=ftp://ftp*://?">
</BODY></HTML>

Fortunately, OE isn't stupid enough to launch the URL automatically if I
open an HTML message with that source, but I wonder about other
HTML-capable news readers.

-- 
Troy


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ