Full Disclosure mailing list archives
RE: Internet Explorer 6 DoS Bug
From: "Simon Lorentsen" <s.lorentsen () box-smart net>
Date: Mon, 7 Jul 2003 23:15:16 +0100
Worked here - UK Version Version 6.0.2800.1106.xpsp2.030422-1633 System is fully updated with all patches. Caused MSIE to hang, only the window I tried it in, all other msie windows worked fine. Sincerely yours, Simon Lorentsen -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of KF Sent: 07 July 2003 14:19 To: fabian.becker2 () epost de Cc: full-disclosure () lists netsys com Subject: Re: [Full-disclosure] Internet Explorer 6 DoS Bug I can NOT duplicate this on IE 6.0.2800.1106.xpsp2-030422-1633.... it simply asks me to open or save the file... if I choose open with notepad for example ... nothing odd happens... notepad says function not found. If I try to save the file to disk it says "aux This filename is a reserved device name please choose another name". I tryed searching for what to open the file with on the ms extension search thing and also came up with nothing odd... What *exact* version of IE do you use? -KF fabian.becker2 () epost de wrote:
Hi, I found a bug in IE6 ón Windows XP with all Service Packs and Patches installed: If you enter C:\aux in the adressline of the IE (not EXPLORER, InternetExplorer) and hit enter, the window will freeze. This
bug is simmilar to C:\con\con but not as dagerous. But its the same reason, naimly that windows trys to open aux, a hardware device in earlier windows versions. I already sended an email to Microsoft but they said the bug wouldn't exist. Bye Fabian Becker (www.neonomicus.ionichost.com) fabian.becker2 () epost de ________________________________________ Mehr Power für Ihre eMail - mit den neuen Leistungspaketen bei http://www.epost.de _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of KF Sent: 07 July 2003 14:19 To: fabian.becker2 () epost de Cc: full-disclosure () lists netsys com Subject: Re: [Full-disclosure] Internet Explorer 6 DoS Bug I can NOT duplicate this on IE 6.0.2800.1106.xpsp2-030422-1633.... it simply asks me to open or save the file... if I choose open with notepad for example ... nothing odd happens... notepad says function not found. If I try to save the file to disk it says "aux This filename is a reserved device name please choose another name". I tryed searching for what to open the file with on the ms extension search thing and also came up with nothing odd... What *exact* version of IE do you use? -KF fabian.becker2 () epost de wrote:
Hi, I found a bug in IE6 ón Windows XP with all Service Packs and Patches installed: If you enter C:\aux in the adressline of the IE (not EXPLORER, InternetExplorer) and hit enter, the window will freeze. This
bug is simmilar to C:\con\con but not as dagerous. But its the same reason, naimly that windows trys to open aux, a hardware device in earlier windows versions. I already sended an email to Microsoft but they said the bug wouldn't exist. Bye Fabian Becker (www.neonomicus.ionichost.com) fabian.becker2 () epost de ________________________________________ Mehr Power für Ihre eMail - mit den neuen Leistungspaketen bei http://www.epost.de _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Troy Sent: 07 July 2003 22:36 To: full-disclosure () lists netsys com Subject: Re: [Full-disclosure] Internet Explorer 6 DoS Bug On Mon, 07 Jul 2003 11:49:29 -0700, Blue Boar <BlueBoar () thievco com> wrote:
So far the couple of people who CAN reproduce it are coming from a .dk
and .de domain. I use the US English version of XP. If anyone else
chimes in
on whether they can reproduce or not, could you please report what
language
version of XP and/or IE you use?
A coworker reproduced it under English XP. However, it's a pretty much fresh install of XP. The IE build IE 6.0.2600.0000.xpclient.010817-1148. Maybe it was fixed in a hotfix that hasn't been translated yet. -- Troy _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Attachment:
smime.p7s
Description:
Current thread:
- Re: Internet Explorer 6 DoS Bug, (continued)
- Re: Internet Explorer 6 DoS Bug paul (Jul 07)
- Re: Internet Explorer 6 DoS Bug Spiro Trikaliotis (Jul 07)
- Re: Internet Explorer 6 DoS Bug Spiro Trikaliotis (Jul 07)
- Message not available
- Re: Internet Explorer 6 DoS Bug Koen Van Impe (Jul 08)
- RE: Internet Explorer 6 DoS Bug Eduardo Reis (Jul 07)
- Re: Internet Explorer 6 DoS Bug bacano (Jul 07)
- Re: Internet Explorer 6 DoS Bug Dimitri Limanovski (Jul 07)
- Re: Internet Explorer 6 DoS Bug pez dude (Jul 07)
- Re: Internet Explorer 6 DoS Bug Blue Boar (Jul 07)
- Re: Internet Explorer 6 DoS Bug Troy (Jul 07)
- RE: Internet Explorer 6 DoS Bug Simon Lorentsen (Jul 07)
- Re: Internet Explorer 6 DoS Bug Dan Williams (Jul 07)
- RE: Internet Explorer 6 DoS Bug Richard M. Smith (Jul 07)
- RE: Internet Explorer 6 DoS Bug Justin Shin (Jul 07)
- SV: Internet Explorer 6 DoS Bug Peter Kruse (Jul 08)
- RE: Internet Explorer 6 DoS Bug Richard M. Smith (Jul 08)
- Re: Internet Explorer 6 DoS Bug Blue Boar (Jul 07)
- Re: Internet Explorer 6 DoS Bug M. Osten (Jul 07)
- Re: Internet Explorer 6 DoS Bug Karl DeBisschop (Jul 07)
- Re: Internet Explorer 6 DoS Bug Brett Hutley (Jul 07)