Vulnerability Development mailing list archives

Re: possible OutLook Bug


From: Cilice Cracker <wildmail () GRATIS1 COM AR>
Date: Wed, 21 Mar 2001 11:46:24 -0300

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Helo:
I tried what you wrote about Outlook and the result are:

*In a Pentium 200Mhz - 32mb RAM - Outlook 5
Windows splash the blue screen and the pc die.
I don't know why, but i tested twice and the result
was the same. I remove the rule and all work fine
again.

*In a Pentium III 600Mhz - 128 RAM - Outlook 5
Nothing appened. All work fine.

bye.

=_=_=_=_=_=_=_=

Sorry, but my english is so bad.... If you was found some error,
insult me :-)



- ----- Original Message -----
From: <Nabil_OUCHN/MOR/LDE/SLE%LYDEC () LYDEC CO MA>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Thursday, March 15, 2001 11:18 AM
Subject: possible OutLook Bug


Recently I was playing with OutLook Express 5... and decided to
create a
rule in order to test black list blocking.

I create a rule with these conditions
1 -  The line "FROM" contains : <sentto>
2 - When the message body contains the word : <sentto>
3- The line "TO" contains : <sentto>

The action when all these conditions are satisfied is :
Do not download file from Server

( excuse me for this bad english, i've translated from Outlook french
version :)


I then restarted Outlook....but when I began to receive
mails...Outlook
hangs...and give this :

MSIMN a causé une défaillance de page dans
 le module MSOE.DLL à 0167:7a0e58a0.
Registres :
EAX=00000000 CS=0167 EIP=7a0e58a0 EFLGS=00010246
EBX=004609c0 SS=016f ESP=00add5b0 EBP=00add614
ECX=00001000 DS=016f ESI=00455ab4 FS=46e7
EDX=00add568 ES=016f EDI=00000000 GS=0000
Octets à CS : EIP :
8b 08 ff 51 20 3b c7 89 45 f8 0f 8c ff 2b fe ff
État de la pile :
00000000 00000000
00add984 00455ab4
004609c0 00000000
00000000 00000000
00000000 00000000
00000000 00000000
00000000 0046d470
00000000 00000000

fix : When I removed the rule....everything worked well !!!! ???

Can someone reproduces this bug and confirm what I write here..

Thank you a lot

nabil Ouchn ( the former gh0sted from www.secsys.net )
Casablanca Security System Scanners=

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 Int. for non-commercial use
<http://www.pgpinternational.com>

iQA/AwUBOri+uuzo/851wG0mEQLPNACgwKD6Gyx9zxVmP+R7R6uz0K2FB1EAn3c8
ze5Ti4WXmZv9PCJEtLKAFa4c
=8xE8
-----END PGP SIGNATURE-----


Current thread: