RE: true garbage

From: perkere stinker (doe_i_sorte_skodderat_private)
Date: Mon Jul 23 2001 - 12:15:49 PDT

  • Next message: KF: "Caldera OpenUnix8 Overflows (reject, lpsystem, su)"

    moderator: include this if you care, i dont, but other people might have got 
    it wrong too.
    
    uhm i kinda mixed a few things inthere. the urlmon.dll comes from the 
    ms-its: repeated 37 times.. create this link:
    
    <a 
    href=ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:ms-its:.>click 
    this</a> - this will cause the urlmon.dll to crash.
    
    I talked to microsoft about similar issues earlier, and i just gave up. it 
    takes a few weeks, and all you end up with is 'we'll be sure to include a 
    fix in the next product update' - so why waste my time.
    
    
    >From: "Uidam, T (Tim)" <Tim.Uidamat_private>
    >To: "'perkere stinker'" <doe_i_sorte_skodderat_private>
    >CC: focus-msat_private
    >Subject: RE: true garbage
    >Date: Mon, 23 Jul 2001 07:31:44 +0800
    >
    >IE6 beta (v6.0.2479.0006), and OLXP 6 Beta (same version) on WinNT 4 SP6 
    >are
    >both vulnerable as well.
    >After opening the link, it gives the same error message you supplied, then
    >errors saying "MSOE.DLL could not be inistialised". Nothing about
    >URLMON.DLL. But naturally, it's version is the same as those shown above.
    >
    >I find it hard to believe that MS does not care about this issue. Unless
    >your correspondance was with their security bug tracking team, and not 
    >their
    >regular, non-security bug trackers?
    >
    >-----Original Message-----
    >From: perkere stinker [mailto:doe_i_sorte_skodderat_private]
    >Sent: Monday, 23 July 2001 4:37
    >To: vuln-devat_private
    >Cc: bugtraqat_private; focus-msat_private
    >Subject: true garbage
    >
    >
    
    
    
    _________________________________________________________________
    Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
    



    This archive was generated by hypermail 2b30 : Mon Jul 23 2001 - 21:30:20 PDT