Full Disclosure mailing list archives

Re: New Microsoft Internet Explorer mshtml.dll Denial of Service?


From: Irwan Hadi <irwanhadi () phxby com>
Date: Tue, 2 Sep 2003 01:56:24 -0600

On Tue, Sep 02, 2003 at 09:12:10AM +0200, Marc Ruef wrote:

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear List

I was looking for some sources that serve translations of Buce Schneiers well-known Crypto-Gram[1]. So I found on the 
official page the hint, that there are some outdated Issues in a german version available.

After clicking in the link that brings me to http://www.galad.com/extras/cg/cg.htm , my Internet Explorer 
6.0.2800.1106 "encounters a problem and needs to close". After a bit of debugging I could determine that the problem 
must be existing in the library mshtml.dll.

I tried to do a small and dirty analysis of the problem. So I fetched the whole page that encounters the error, but I 
couldn't reproduce the program shutdown with the offline version. It doesn't matter if I keep the original linking 
and embedded pictures as a link to the original web source.


It worked fine for me, running IE 6.0 with the latest patches on Win
2000. Maybe just because you don't have the latest patches on your
computer.

PS: for the admin of this list, it seems that it's time to switch to
faster Mail Transport Agent like Postfix or qmail. See the difference
between the email from this person received on my two different mail
accounts. Seems interesting.:

Tue, 2 Sep 2003 01:35:41 -0600
Tue,  2 Sep 2003 01:52:52 -0600 (MDT)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: