Blue screen in Windows

From: David F. Madrid (idoruat_private)
Date: Tue May 20 2003 - 13:04:54 PDT

Next message: Lorenzo Manuel Hernandez Garcia-Hierro: "PHP-Nuke Denial of Service attack and more SQL Injections"

Previous message: Knud Erik Højgaard: "[Full-Disclosure] Maelstrom Local Buffer Overflow Exploit, FreeBSD 4.8 edition"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Issue :

Blue screen in Windows


Tested versions :

W2000 Server Sp3 with IE 6.0 Sp1
XP Pro with IE 6.0


Vendor status :

MS is investigating the issue but as they spent months to just acknowledge
it I decided to publish it


Description :

With Internet Explorer you can make calls using netmeeting ,
navigating to callto Urls . On the systems tested if you try to
navigate to a specially crafted callto url Windows halt with a
Kmode exception not handled . I can´t reproduce this always,
particulary not after rebooting from the system halt , but the issue
was confirmed in two different computers .

I am afraid I can´t give any debugging info cause no causing module is
shown in the BSOD .


Exploit :

In the spanish version of this advisory you can find a demonstration

http://nautopia.org/vulnerabilidades/callto_bluescreen.htm

Just click the link "Pulsa aquí para parar Windows"


Regards ,

David F. Madrid ,
Madrid , Spain

Next message: Lorenzo Manuel Hernandez Garcia-Hierro: "PHP-Nuke Denial of Service attack and more SQL Injections"
Previous message: Knud Erik Højgaard: "[Full-Disclosure] Maelstrom Local Buffer Overflow Exploit, FreeBSD 4.8 edition"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue May 20 2003 - 13:26:00 PDT