Vulnerability Development mailing list archives

Re: recursion


From: blake () MC NET (Blake Frantz)
Date: Thu, 10 Feb 2000 00:05:48 -0600


I'm running IE5 on a win98 box with the NetZip Download Daemon installed.
when that daemon is running, it tries to download the file and no error
occurs, with out that daemon...I get a crash.

Blake

-----Original Message-----
From: VULN-DEV List [mailto:VULN-DEV () SECURITYFOCUS COM]On Behalf Of
Pauli Ojanpera
Sent: Wednesday, February 09, 2000 5:41 AM
To: VULN-DEV () SECURITYFOCUS COM
Subject: its: recursion

Put 37 concatenated "its:" strings as a target url and IE4 crashes
when trying to handle that url.. No I don't know if you wanted
to know this.

<a
href="its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:it
s:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:it
s:.">do
not click me</a>

There has to be a valid path/file name after the crash string.
I put "." because such a subdirectory exists in most directories
and it is short. :)

Its is some M$ help protocol. Quick search with altavista...
<a href="http://helpware.net/htmlhelp/linktochm.htm";>jotaan</a>

... I didn't co-operate with M$. And I won't. Mitä sitte?
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com


Current thread: