full-disclosure - new IE bug (confirmed on ALL windows)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4368C002.9010502@chrisclymer.com>
Date: Wed Nov  2 13:34:56 2005
From: cclymer at gmail.com (Chris Clymer)
Subject: new IE bug (confirmed on ALL windows)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This also appears to be IE6-only.  We were able to crash IE6 in
WinXP-32bit, but the old IE5 I have going in WINE kept chugging along
just fine.

ad@...ss101.org wrote:
> Well please shut the fuck , I have win98se FR here on a old CD, and I have
> reinstalled it only for you tonight, conclusion: it DOES CRASH ALSO on
> win98.
> 
> Happy now to look idiot ?
> 
> -----Message d'origine-----
> De : full-disclosure-bounces@...ts.grok.org.uk
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] De la part de Greg
> Envoy? : mercredi 2 novembre 2005 09:19
> ? : full-disclosure@...ts.grok.org.uk
> Objet : Re: [Full-disclosure] new IE bug (confirmed on ALL windows)
> 
> 
> No play on words. You said it worked on all Windows and it doesn't, simple 
> as that. WHY it works on XP and not on 98SE is for anyone interested in that
> 
> difference to check out.
> 
> If it were a play on words, it wouldn't be a correction of an obvious 
> mistake.
> 
> ----- Original Message ----- 
> From: <ad@...ss101.org>
> To: "'Greg'" <full-disclosure@...andyman.com.au>
> Cc: <full-disclosure@...ts.grok.org.uk>
> Sent: Wednesday, November 02, 2005 10:06 AM
> Subject: RE: [Full-disclosure] new IE bug (confirmed on ALL windows)
> 
> 
> Rofl... there is always someone to play with words...
> 
> -----Message d'origine-----
> De : full-disclosure-bounces@...ts.grok.org.uk
> [mailto:full-disclosure-bounces@...ts.grok.org.uk] De la part de Greg
> Envoy? : mardi 1 novembre 2005 21:32
> ? : full-disclosure@...ts.grok.org.uk
> Objet : Re: [Full-disclosure] new IE bug (confirmed on ALL windows)
> 
> 
> ----- Original Message ----- 
> From: <ad@...ss101.org>
> To: <full-disclosure@...ts.grok.org.uk>
> Sent: Wednesday, November 02, 2005 4:00 AM
> Subject: [Full-disclosure] new IE bug (confirmed on ALL windows)
> 
> 
> 
>>I think I have found by chance this weekend a security bug,while browsing
>>the website news, within iexplorer on all windows versions.
>>
> 
> 
> Sorry to be the "Negative Nark" here but yes, the crash works on IESP2 with
> XPSP2 but NO it does NOT crash WIN98SE with IESP2. The 98SE box was
> networked through ICS (wired to this XP box then wi-fi to a router) and has
> no firewall of it's own. This XP box through which the 98SE box gets it's
> internet is in the router's DMZ and uses only Zone Alarm Pro, just for
> clarity.
> 
> So, in essence the "confirmed on all windows" is wrong.
> 
> Greg.
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 

- --
          Chris Clymer - Chris@...isClymer.com
PGP: E546 19B6 D1EC 47A7 CAA0 8623 C807 398C CD27 15B8

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDaMAByAc5jM0nFbgRAo9SAJ0ddWe2iDDyFa2MTJvNRadK/MpwywCgtKXl
7dZd2tU0xkmmzWGu825Vqlg=
=kstN
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: chris.vcf
Type: text/x-vcard
Size: 293 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20051102/8d70795c/chris.vcf