full-disclosure - new IE bug (confirmed on ALL windows)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue Nov  1 20:32:26 2005
From: full-disclosure at pchandyman.com.au (Greg)
Subject: new IE bug (confirmed on ALL windows)

----- Original Message ----- 
From: <ad@...ss101.org>
To: <full-disclosure@...ts.grok.org.uk>
Sent: Wednesday, November 02, 2005 4:00 AM
Subject: [Full-disclosure] new IE bug (confirmed on ALL windows)

>I think I have found by chance this weekend a security bug,while browsing
> the website news, within iexplorer on all windows versions.
>

Sorry to be the "Negative Nark" here but yes, the crash works on IESP2 with 
XPSP2 but NO it does NOT crash WIN98SE with IESP2. The 98SE box was 
networked through ICS (wired to this XP box then wi-fi to a router) and has 
no firewall of it's own. This XP box through which the 98SE box gets it's 
internet is in the router's DMZ and uses only Zone Alarm Pro, just for 
clarity.

So, in essence the "confirmed on all windows" is wrong.

Greg.