Vulnerability Development mailing list archives

IE kills (kill IE)


From: "*(todd+1)" <willey () BLUE NET>
Date: Wed, 17 Jan 2001 19:44:09 -0500

Recently, while looking for information on using an ActiveX add-in for one of my programs, I came accross a page at 
http://www.cse.msu.edu/~cse471/lab8.html that didn't like me.  Halfway down the page there is code that looks like this:

if(m_pPlayer==NULL)
{
    // This will happen on the first draw without a media player
    ....(for berevity's sake)
}

To save myself some time, I was going to copy and paste the code, and then rearragnge it to suit my needs. However, 
when I tried to highlight the text (starting from the top of the if statement) my computer died.  It did this five 
times in a row. I would get to somewhere in the middle of the commented line (with the "//" in front) and my system 
would reboot.

I tried to duplicate the problem by making another html document and including some <pre> tags and putting the 
identical text down, but I could never reproduce the reboot.  I am not sure why this is happening.  I am using Win98 
Release 2 and IE 5.00.2614.3500 .  My version of mshtml.dll is dated 4/23/99.

I believe that if this problem is reproduced that it could lead malicious html authors to use dynamic html and select 
that text, thereby rebooting the machine.

Since I have not been able to reproduce the problem, I have not notified Microsoft, but I believe that if the problem 
is replicated they should be informed.


Todd Willey, ubermother

Current thread: