full-disclosure - DoS vulnerability in Internet Explorer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sun, 8 Nov 2009 15:54:08 +0200
From: "MustLive" <mustlive@...security.com.ua>
To: <full-disclosure@...ts.grok.org.uk>
Subject: DoS vulnerability in Internet Explorer

Hello participants of Full-Disclosure!

I want to warn you about Denial of Service vulnerability in Internet
Explorer. Yesterday I already informed Microsoft.

This attack I called DoS via homepage.

DoS:

http://websecurity.com.ua/uploads/2009/IE%20DoS%20Exploit10.html

With this exploit in IE6 the browser blocks, so it's become impossible to
use it and it's only possible to close it (via Task Manager).

With this exploit in IE7 the browser freezes after click on the link .

Vulnerable versions are Internet Explorer 6 (6.0.2900.2180), Internet 
Explorer 7 (7.0.6000.16711) and previous versions (and possible next 
versions too).

I mentioned about this vulnerability at my site
(http://websecurity.com.ua/3658/).

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/