Bugtraq mailing list archives

Re: L0pht Advisory: IE4.0

From: dleblanc () MINDSPRING COM (David LeBlanc)
Date: Mon, 10 Nov 1997 22:54:55 -0500


At 03:43 PM 11/10/97 -0500, DilDog wrote:

     Document:  L0pht Security Advisory
   URL Origin:  http://l0pht.com/advisories.html
 Release Date:  November 1st, 1997
  Application:  Microsoft Internet Explorer 4.0 Suite
     Severity:  Viewing remote HTML content can execute arbitrary native

code

       Author:  dildog () l0pht com
Operating Sys:  Windows 95

---------------------------------------------------------------------------

---

Hmmm - all it does on NT is:

Internet Explorer cannot open the Internet site

res://¸ÄAØ-Ø3ÉÁª Ù±_  â  CâöPj ºíÂX ê    R»·ò÷¿ï
ÿÓZZP3Û³ Së SP»àù¿ÿÓì XP3Û³9S» Òç ë   SP»°Êù¿ÿÓÄ »Ïù¿ÿÓ»°¯
ø¿ÿÓÌÌ-------------C:\AUTOEXEC.BAT ECHO MICRO$OFT 0WNZ YOU... REPENT
AND BE SAVED! PAUSE ----------------AAAABBBBC  ¾¿DDDEDÁW/

The filename or extension is too long.

Of course, you did say it applied to Win95...

OTOH, I'm _really_ disappointed - I've been hearing that since I was
running IE 4.0 that I could be owned.  Thought for a minute or two that I
might need to start using netcat as my browser.




David LeBlanc           |Why would you want to have your desktop user,
dleblanc () mindspring com |your mere mortals, messing around with a 32-bit
                        |minicomputer-class computing environment?
                        |Scott McNealy

Current thread:

Re: Linux IP fragment overlap bug, (continued)
- - - Re: Linux IP fragment overlap bug David LeBlanc (Nov 14)
    - Re: Linux IP fragment overlap bug Morbid Dead Guy (Nov 16)
    - Windows 95 IP Fragmentation Bug Fix? Aleph One (Nov 17)
    - The Linux patch. G P R (Nov 14)
    - The overlapping fragment bug Alan Cox (Nov 14)
    - Re: The overlapping fragment bug Philippe Strauss (Nov 14)
    - Re: The overlapping fragment bug G P R (Nov 15)
    - Pentium processor invalid instruction erratum Aleph One (Nov 14)
    - Software backgrounder Aleph One (Nov 14)
    - BSDI patch for Pentium workaround has problems Charles M. Hannum (Nov 14)
    - Re: L0pht Advisory: IE4.0 David LeBlanc (Nov 10)
    - Re: L0pht Advisory: IE4.0 rene () NS VIA NL (Nov 11)
    - Intel Pentium Bug: Workaround (1st lvl cache) Ralf Rudolph (Nov 11)