full-disclosure - Re: new IE bug (confirmed on ALL windows)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <000f01c5dfbb$d3142b80$0400a8c0@winxp64>
Date: Wed Nov  2 14:44:25 2005
From: ad at class101.org (ad@...ss101.org)
Subject: Re: new IE bug (confirmed on ALL windows)

Nop here im sure sorry, for example someone reported in this thread to copy
this content into an html file:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
"http://www.w3c.org/TR/1999/REC-html401-19991224/loose.dtd">
<STYLE>
.supp IMG {
VERTICAL-ALIGN: middle
}
</STYLE>
<P><A <It>.</P>
<DIV class="supp"><A><IMG>

Crashes on xp, 2k it no more crashes, 98 it crashes 1/5 tries... but the one
I posted , it crashes everytime loaded and everywhere I have mentioned + 98
included, and this Im 100% sure. This hole is very unreliable so follow MY
instructions if you do want to test ...

-----Message d'origine-----
De?: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] De la part de Dave Korn
Envoy??: mercredi 2 novembre 2005 15:18
??: full-disclosure@...ts.grok.org.uk
Objet?: [Full-disclosure] Re: new IE bug (confirmed on ALL windows)

> -----Message d'origine-----
> De : full-disclosure-bounces De la part de Greg
> Envoy? : mardi 1 novembre 2005 21:32

> ----- Original Message -----
> From: <ad@...ss101.org>
> Sent: Wednesday, November 02, 2005 4:00 AM

>> I think I have found by chance this weekend a security bug,while
>> browsing the website news, within iexplorer on all windows versions.
>>
>
> Sorry to be the "Negative Nark" here but yes, the crash works on
> IESP2 with XPSP2 but NO it does NOT crash WIN98SE with IESP2. The
> 98SE box was networked through ICS (wired to this XP box then wi-fi
> to a router) and has no firewall of it's own. This XP box through
> which the 98SE box gets it's internet is in the router's DMZ and uses
> only Zone Alarm Pro, just for clarity.

ad@...ss101.org wrote in news:000001c5dfaf$84f6ba00$0400a8c0@...xp64
> Again shut the fuck up , it also crashes on 98SE I have it here IDIOT.

[...ker-snip!...]

    Guys?  Can I point out the obvious possibility that you both seem to 
have overlooked?

  Rather than arguing about either "it does crash on 98" or "it doesn't 
crash on 98", and since you've *both* _actually_ tested it, AND GOTTEN 
DIFFERENT RESULTS, don't you think that you should both conclude that "It 
crashes on some 98 installs and not others", and therefore that the 
determining factor is not the OS version anyway, but something else that's 
different between your two setups?

  It's a false assumption that it has to be all one or the other.

    cheers,
      DaveK
-- 
Can't think of a witty .sigline today.... 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/