full-disclosure - Does your IE6 crash with these "URLs"?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Law11-OE64Eh4TNStb500009df8@hotmail.com>
From: se_cur_ity at hotmail.com (morning_wood)
Subject: Does your IE6 crash with these "URLs"?

> I have a question. I would like to know, if you can also crash 
> IE6, when typing the following "URL":
> 
> ftp*://?
> 
> I have also tried from HTML like this:
> 
> <html>
> <body>
> <script language="JavaScript">
> window.open("ftp://ftp*://?");
> </script>
> </body>
> </html>
> 
> I could crash IE about a year ago with the first "URL" above 


unconfirmed XPpro / Ie 6 ( 6.0.2600.0000.xpclient.010817-1148 )

morning_wood
http://exploitlabs.com