full-disclosure - msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <002701c436bc$7a203860$aa41b350@fucku>
From: theinsider at 012.net.il (Rafel Ivgi, The-Insider)
Subject: msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh

msxml3.dll crashes after refreshing a page which contains & inside a
link/value
For Example : <Ref href = "&"/>
This is due to a parsing error in msxml3.dll.

Version Details:
---------------------
I.E Version: 6.0.2600.0
ModVer: 8.10.8308.0
Module name: msxml3.dll
Offset: 000b8c10

Stack Dump:
-----------------
EAX=01CEE800
EDI=01D02580
EBX=00000000
EBP=02C3F3E4
ECX=00000000
ESP=02C3FC74
EDX=02D91364
EIP=02E18C10
ESI=00000000
DS:00000004     GS:0000     ES:0023     SS:0023     CS:001B

Live Example:
http://theinsider.deep-ice.com/xmlcrash.xml
AND REFRESH...