Confirmed on Windows 2000 Pro Sp1 and MSIE 5.00.3103.1000 56bit cipher >================================================================< Shawn McKeon (aka joeuser) ICQ# 377611 mailto:joeuserat_private PGP Fingerprint 4011 1E46 DF8B 2955 1D59 1896 56D4 9775 96AE BFEE PGP KEY http://www.servicefirstcomputers.com/personal/joeuser.asc >================================================================< < ORIGINAL MESSAGE(S) & POSSIBLY EDITED FOR CONTENT/SPACE BELOW. > Synopsis -------------- By putting this malformed link on a web page a malicious user could crash all the IE windows. It also work by passing the link directly into the address field of IE. Affected version : ----------------------- IE 5.5 sp1 for WIN 98 / 98 SE /2000 / 2000 sp1 IE 5.5 for WIN 98 / 98 SE /2000 / 2000 sp1 IE 5.0 for WIN 98 / 98 SE /2000 / 2000 sp1 The Bug : ------------- the following url Crash IE : "ftp://whatever//.#./"
This archive was generated by hypermail 2b30 : Sat May 05 2001 - 22:33:01 PDT