Re: MSIE crash-"feature"

From: Richard Pachito (alpyhaat_private)
Date: Wed Apr 23 2003 - 18:41:42 PDT

Next message: moran zavdi: "Re: cipher.exe overflow"

Previous message: Dino Dai Zovi: "Re: Jump back to shellcode Windows overflow"
In reply to: Magnus Bodin: "MSIE crash-"feature""
Next in thread: Remington Winters: "Re: MSIE crash-"feature""
Reply: Remington Winters: "Re: MSIE crash-"feature""
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I  think it's pretty interesting how you can crash IE using that gif, but
not explorer when it goes to preview.  I thought it rendered the html using
IE?

----- Original Message -----
From: "Magnus Bodin" <magnusat_private>
To: <vuln-devat_private>
Sent: Wednesday, April 23, 2003 1:35 AM
Subject: MSIE crash-"feature"


>
> Sorry if this is old news already, but IE has a rather interesting feature
> (tested with 6.0.2600.0000 whatever that means)
>
> It crashes on very minimalistic code; check here:
>
>     http://x42.com/test/ie_feature.html
>
> It can be further stripped down and even sent as different MIME-type (see
old
> posting about the MIME-"smartness in IE):
>
>     http://x42.com/test/galopp.gif
>
>
> For those who want to test it with their HTML-compatible mail reader, send
> a mail to
>
>     iecrashat_private
>
> and you will get a HTML-mail in return.
>
> /magnus
>
> --
> http://x42.com

Next message: moran zavdi: "Re: cipher.exe overflow"
Previous message: Dino Dai Zovi: "Re: Jump back to shellcode Windows overflow"
In reply to: Magnus Bodin: "MSIE crash-"feature""
Next in thread: Remington Winters: "Re: MSIE crash-"feature""
Reply: Remington Winters: "Re: MSIE crash-"feature""
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Apr 24 2003 - 12:58:11 PDT