Bugtraq mailing list archives
Re: Update: Web browsers - a mini-farce (MSIE gives in)
From: <gabrield89 () hotmail com>
Date: 25 Oct 2004 15:00:44 -0000
In-Reply-To: <20041023001154.F23256 () dekadens coredump cx>
Last but not least, MSIE gives in:Only MSIE appears to be able to consistently handle [*] malformed input well, suggesting this is the only program that underwent rudimentary security QA testing with a similar fuzz utility.To all those who considered my original post to be a great propaganda ammunition for praising MSIE, bad news - although it did take a longer while for it to give up - three hours - (impressive by comparison to competitors), it eventually did: http://lcamtuf.coredump.cx/mangleme/gallery/ie_die1.html Tested on 6.0.2800.1106, dies in mshtml.dll. This is a NULL pointer dereference, so merely a DoS condition, but still an evident flaw in basic HTML parsing.
Testing on Windows 98 running IE 6.0.2800.1106. Nothing happens. IE does not crash. Can anyone else confirm this?
Current thread:
- RE: Update: Web browsers - a mini-farce (MSIE gives in) David Brodbeck (Oct 25)
- Re: Update: Web browsers - a mini-farce (MSIE gives in) Valdis . Kletnieks (Oct 27)
- <Possible follow-ups>
- Re: Update: Web browsers - a mini-farce (MSIE gives in) gabrield89 (Oct 25)
- Re: Update: Web browsers - a mini-farce (MSIE gives in) MCMuir (Oct 28)
- RE: Update: Web browsers - a mini-farce (MSIE gives in) Michael Wojcik (Oct 27)
- Re: Update: Web browsers - a mini-farce (MSIE gives in) Valdis . Kletnieks (Oct 27)
- Re: Update: Web browsers - a mini-farce (MSIE gives in) Chris Paget (Oct 29)
- RE: Update: Web browsers - a mini-farce (MSIE gives in) Michael Wojcik (Oct 27)
- Re: Update: Web browsers - a mini-farce (MSIE gives in) Valdis . Kletnieks (Oct 28)
- RE: Update: Web browsers - a mini-farce (MSIE gives in) David Brodbeck (Oct 28)
- RE: Update: Web browsers - a mini-farce (MSIE gives in) Michael Wojcik (Oct 28)
- RE: Update: Web browsers - a mini-farce (MSIE gives in) Tim Newsham (Oct 29)
- Re: Update: Web browsers - a mini-farce (MSIE gives in) Michael Shigorin (Oct 29)
(Thread continues...)