Clan x86

General Forums => General Discussion => Topic started by: iago on February 15, 2005, 04:25:05 PM

Title: Internet Explorer crash
Post by: iago on February 15, 2005, 04:25:05 PM
Thought I'd share it here.  Nothing huge or important, just a little crash:

Quotehi,

Affected Software : Microsoft Internet Explorer
Vulnerability : Remote DOS / Crash
Tested On : MS IE 6.0 SP1, Win2K SP4, [up-to-date]
according to windowsupdate.com

Discovered by : Gregory R. Panakkal

HomePage : http://www.crapware.tk

Details
=======
Pointing a link to the URI -> file://!:\ [replace !
with the character with ascii value for eg:- 0xA0].
Causes IE6-SP1 to crash, the illegal op occuring in
user32.dll. Other special characters are also
possible.


Demo
====
A demonstration is available at the following URL.

http://crapware.lx.ro/junkcode/security/ie-sp1-file-a0-crash.htm


Greetz to
=========
Rakesh Balasunder - r0ck@iNfy
CK - Saitegog!  :)

rgds,
Gregory R. Panakkal

Title: Re: Internet Explorer crash
Post by: Warrior on February 15, 2005, 04:47:47 PM
hahhaha thats great!
Title: Re: Internet Explorer crash
Post by: Joe on February 15, 2005, 05:04:36 PM
An IE crash is no longer the exception to the rule. It has become the rule, and the exception is not crashing.
Title: Re: Internet Explorer crash
Post by: iago on February 15, 2005, 06:40:46 PM
Apparently it's been around (unfixed) for almost a year

Quote>> Discovered by : Gregory R. Panakkal

Incorrect: E.Kellinis reported it on Friday, May 07, 2004 to bugtraq:
http://www.securityfocus.com/archive/1/362524/2004-05-06/2004-05-12/0


>> Pointing a link to the URI -> file://!:\ [replace !
>> with the character with ascii value for eg:- 0xA0].
>> Causes IE6-SP1 to crash, the illegal op occuring in
>> user32.dll. Other special characters are also
>> possible.


More details can be found here:
http://lists.netsys.com/pipermail/full-disclosure/2004-May/021272.html
http://lists.netsys.com/pipermail/full-disclosure/2004-December/030115.html

                        .-----------------------------------,
                       / Berend-Jan Wever aka SkyLined       )
                      / skylined@edup.tudelft.nl            / \
                     / http://www.edup.tudelft.nl/~bjwever /  /
                    / PGP key ID 0x48479882               /  /
                   / .----.            ,                 /  /
                  / (      '  /       /  .     __   __/ /  /
                 /   `'-._   /.' | / /  / ( / /_.'.' / /  /
                (         ) / )  |/ /  / / ) (__ (__/ /  /
                 \-------' ------` '-----------------<  /
                  \______.`\______\/\_________________\/



Title: Re: Internet Explorer crash
Post by: sujak on February 15, 2005, 11:22:28 PM
mine didnt crash.......
Title: Re: Internet Explorer crash
Post by: Mythix on February 16, 2005, 12:24:00 AM
are you on SP1 or SP2?
Title: Re: Internet Explorer crash
Post by: MyndFyre on February 16, 2005, 11:16:32 AM
Crashed on WinXP SP2 here at school.
Title: Re: Internet Explorer crash
Post by: iago on February 16, 2005, 12:02:16 PM
Sujak is probably on Mac, which would explain it