full-disclosure - New Microsoft Internet Explorer mshtml.dll Denial of Service?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20030902075624.GG28255@phxby.com>
From: irwanhadi at phxby.com (Irwan Hadi)
Subject: New Microsoft Internet Explorer mshtml.dll Denial of Service?

On Tue, Sep 02, 2003 at 09:12:10AM +0200, Marc Ruef wrote:

>  
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Dear List
> 
> I was looking for some sources that serve translations of Buce Schneiers well-known Crypto-Gram[1]. So I found on the official page the hint, that there are some outdated Issues in a german version available.
> 
> After clicking in the link that brings me to http://www.galad.com/extras/cg/cg.htm , my Internet Explorer 6.0.2800.1106 "encounters a problem and needs to close". After a bit of debugging I could determine that the problem must be existing in the library mshtml.dll.
> 
> I tried to do a small and dirty analysis of the problem. So I fetched the whole page that encounters the error, but I couldn't reproduce the program shutdown with the offline version. It doesn't matter if I keep the original linking and embedded pictures as a link to the original web source.
> 

It worked fine for me, running IE 6.0 with the latest patches on Win
2000. Maybe just because you don't have the latest patches on your
computer.

PS: for the admin of this list, it seems that it's time to switch to
faster Mail Transport Agent like Postfix or qmail. See the difference
between the email from this person received on my two different mail
accounts. Seems interesting.:

Tue, 2 Sep 2003 01:35:41 -0600
Tue,  2 Sep 2003 01:52:52 -0600 (MDT)