IE 6.0 - trivial crash - part II

From: Adam [ckkl] (ckklat_private)
Date: Fri Apr 18 2003 - 13:19:11 PDT

  • Next message: Dave Aitel: "Re: Authentication flaw in microsoft SMB protocol"

    Hello,
    
    Nothing to add again, just a trivial IE crash.
    http://www.sztolnia.pl/hack/TrivialIECrash2/TrivialIECrash2.html
    
    I checked the net and haven't found any other sysmon.ocx 
    vulnerability, except this one http://www.ussrback.com/labs57.html 
    but this one uses different CLSID. 
    Thx to Richard Moore who pointed out my rediscovery in my last post.
    
    Best Regards
    Adam Blaszczyk
    reverser, coder, writer & researcher  [VX/AV]
    http://www.symantec.com (Localization Engineer)
    http://www.mykakee.com (Home page)
    Whatever I say in this e-mail is my private opinion.
    



    This archive was generated by hypermail 2b30 : Sat Apr 19 2003 - 09:47:50 PDT