Re: Internet Explorer 6 DoS Bug

["Dave" <dave () uktext com>]

IE version:6.0.2800.1106
2k pro sp3
confirm, the browser freezes, and requires task man to close it.
regards
Dave

----- Original Message ----- 
From: "Joe Hummel" <joe () jthnet com>
To: <fabian.becker2 () epost de>
Cc: <full-disclosure () lists netsys com>; "'KF'" <dotslash () snosoft com>
Sent: Monday, July 07, 2003 7:34 PM
Subject: RE: [Full-disclosure] Internet Explorer 6 DoS Bug


I can not duplicate this either, and did not get any prompts, just a
default page stating "The page cannot be displayed".  I am Internet
Explorer 6 (6.0.2800.1106.xpsp2.030422-1633).

Regards,
Joe Hummel



-----Original Message-----
From: full-disclosure-admin () lists netsys com
[mailto:full-disclosure-admin () lists netsys com] On Behalf Of KF
Sent: Monday, July 07, 2003 9:19 AM
To: fabian.becker2 () epost de
Cc: full-disclosure () lists netsys com
Subject: Re: [Full-disclosure] Internet Explorer 6 DoS Bug


I can NOT duplicate this on IE 6.0.2800.1106.xpsp2-030422-1633.... it
simply asks me to open or save the file... if I choose open with notepad

for example ... nothing odd happens... notepad says function not found.
If I try to save the file to disk it says "aux This filename is a
reserved device name please choose another name". I tryed searching for
what to open the file with on the ms extension search thing and also
came up with nothing odd...

What *exact* version of IE do you use?

-KF

fabian.becker2 () epost de wrote:

> Hi,
> I found a bug in IE6 ón Windows XP with all Service Packs and Patches
> installed: If you enter C:\aux in the adressline of the IE (not
> EXPLORER, InternetExplorer) and hit enter, the window will freeze. This

> bug is simmilar to C:\con\con but not as dagerous. But its the same
> reason, naimly that windows trys to open aux, a hardware device in
> earlier windows versions. I already sended an email to Microsoft but
> they said the bug wouldn't exist.
>
> Bye
>
> Fabian Becker (www.neonomicus.ionichost.com) fabian.becker2 () epost de
>
>
>
>
> ________________________________________
> Mehr Power für Ihre eMail - mit den neuen Leistungspaketen bei
> http://www.epost.de
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html