camouflage
2003-05-02, 15:00:50
Quelle:www.warp2search.com
M$: Internet Explorer Crashes Using Simple HTML Code
Just recently a piece of code has been making its way round the internet that allows people to open others CD drives by simply getting them to vist a website. Annoying as that was there is another piece of code which isn't even really all that advanced that will crash Internet Explorer with the error "Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access Violation". Shockingly this line code is very easy to implement into any HTML.
The bug posted at BugTraq on the 21st of April is now spreading around the internet, so watch out for what URLs you click on from friends and in emails for now. The line of code is literally :
Read More for code and a test page which causes a crash.
---------------
< html>
< form>
< input type crash>
< /form>
< /html>
--------------
According to the post at BugTraq this line of code can also crash Outlook, Frontpage and all other Microsoft software that use shlwapi.dll to render HTML. Although this code is simply amazing it is simply a null pointer overwrite so it is not easily exploitable.
Get more information at BugTraq post. (http://www.securityfocus.com/archive/1/319360/2003-04-20/2003-04-26/0)
Test your internet explorer and other browsers if they crash by clicking here. (http://www.warp2search.net/crash.htm)
(I have tested it myself, no other malfunctions or data lost occured on my system. Try at your own risk.)
M$: Internet Explorer Crashes Using Simple HTML Code
Just recently a piece of code has been making its way round the internet that allows people to open others CD drives by simply getting them to vist a website. Annoying as that was there is another piece of code which isn't even really all that advanced that will crash Internet Explorer with the error "Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access Violation". Shockingly this line code is very easy to implement into any HTML.
The bug posted at BugTraq on the 21st of April is now spreading around the internet, so watch out for what URLs you click on from friends and in emails for now. The line of code is literally :
Read More for code and a test page which causes a crash.
---------------
< html>
< form>
< input type crash>
< /form>
< /html>
--------------
According to the post at BugTraq this line of code can also crash Outlook, Frontpage and all other Microsoft software that use shlwapi.dll to render HTML. Although this code is simply amazing it is simply a null pointer overwrite so it is not easily exploitable.
Get more information at BugTraq post. (http://www.securityfocus.com/archive/1/319360/2003-04-20/2003-04-26/0)
Test your internet explorer and other browsers if they crash by clicking here. (http://www.warp2search.net/crash.htm)
(I have tested it myself, no other malfunctions or data lost occured on my system. Try at your own risk.)