Vulnerability Development mailing list archives

RE: Outlook HTML crash


From: "Larry Seltzer" <larry () larryseltzer com>
Date: Thu, 13 Mar 2003 21:45:53 -0500

Confirmed on Outlook 2002, although I'm not sure I'd call this a vulnerability.

LJS

-----Original Message-----
From: Nate Nord [mailto:natenord () maximus com] 
Sent: Wednesday, March 12, 2003 3:53 PM
To: vuln-dev () securityfocus com
Subject: FW: Outlook HTML crash



-------------------- >>>>>
Please post this to vuln-dev () securityfocus com
<<<<< -------------------- <<<<<



One of our users has discovered an interesting Outlook crash 
pertaining to HTML e-mail.  I was wondering if anyone else has seen this.

The crash is pretty simple... reply to an HTML e-mail and throw in a 
bunch of carriage returns and random characters in the previous e-mail 
space. It seems to take only a few lines of this before Outlook 
crashes hard and then closes.

This has been tested on several Outlook 2000 machines and it seems to 
work every time.




Current thread: