HTML Exploit for Windows

I havent seen any talk about this particular exploit, but it concerns me more so that someone who posts it in a forum or creates an Ebay auction can crash Windows with little effort.

Create an HTML page with the following code:

IMG src="http://stb.msn.com/i/D2/D28DB9CFDCCEE8A44CE0A8118D75BFA1.jpg" height="9999999" width="9999999

Add brackets of course to the line above.

Save the HTML and run it. It will crash Windows and is not browser dependent. It crashed both IE and FF.

Anyone know of a patch for this?

I havent seen any talk about this particular exploit, but it concerns me more so that someone who posts it in a forum or creates an Ebay auction can crash Windows with little effort.

Create an HTML page with the following code:

IMG src="http://stb.msn.com/i/D2/D28DB9CFDCCEE8A44CE0A8118D75BFA1.jpg" height="9999999" width="9999999

Add brackets of course to the line above.

Save the HTML and run it. It will crash Windows and is not browser dependent. It crashed both IE and FF.

Anyone know of a patch for this?

It would help if you had a reference to the vulnerability that this is supposed to exploit. For all we know, you don't have a WinXP that is up to date or is missing a specific patch. I seem to remember a recent IE vulnerability that was addressed about a month ago that may have addressed that particular issue.

You might also provide a bit of background on the exploit information so we can verify it.

It would help if you had a reference to the vulnerability that this is supposed to exploit. For all we know, you don't have a WinXP that is up to date or is missing a specific patch. I seem to remember a recent IE vulnerability that was addressed about a month ago that may have addressed that particular issue.

You might also provide a bit of background on the exploit information so we can verify it.

Hey Hey,

Well I just put this into a page (http://www.aoaddicts.net/htregz/crash.html)... and then I loaded a VPC image... It's XP updated with everything except for this past Tuesdays patches....

It definately didn't crash my image.. just created a giant white square (where an image should appear)..

Peace,
HT

Hey Hey,

Well I just put this into a page (http://www.aoaddicts.net/htregz/crash.html)... and then I loaded a VPC image... It's XP updated with everything except for this past Tuesdays patches....

It definately didn't crash my image.. just created a giant white square (where an image should appear)..

Peace,
HT

Argh....sorry about that..its what happens when I post while at work :)
Any who, I am running this on a fully patched XPSP2 Pro machine (not a Vpc or VM).
I havent seen any other information regarding this exploit...Also, it probably should be called an "exploit" persay, but more a bug/defect in the way XP handles it.

Argh....sorry about that..its what happens when I post while at work :)
Any who, I am running this on a fully patched XPSP2 Pro machine (not a Vpc or VM).
I havent seen any other information regarding this exploit...Also, it probably should be called an "exploit" persay, but more a bug/defect in the way XP handles it.

Wildred: Where was that exploit published? How recently?

Thanks,
-Deeboe

Wildred: Where was that exploit published? How recently?

Thanks,
-Deeboe