RE: [Full-Disclosure] Crash IE with 11 bytes ;)

[Stephen Taylor <staylo@xxxxxxxxxxxxxx>]

Made a mistake. I just tried with Mozilla Firefox 0.9 again and it's works
fine.  The symbol in the URL window is from E-CQURITY. It's obviously their
logo. Didn't visit that site before. --ST

-----Original Message-----
From: full-disclosure-admin@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx]On Behalf Of Arjun
Pednekar
Sent: Monday, July 26, 2004 7:44 AM
To: staylo@xxxxxxxxxxxxxx; 'Phuong Nguyen'; 'Marcel Krause'
Cc: full-disclosure@xxxxxxxxxxxxxxxx
Subject: RE: [Full-Disclosure] Crash IE with 11 bytes ;)


Yeah about:<input%20type%20crash> did crash IE, on my win 2K system.

Even the following works in IE (not in Mozilla/5.0)

about:<script>alert('HI')</script>

arJun

****************************************************************************
The information in this email is confidential and may be legally privileged.
Access to this email by anyone other than the intended addressee is
unauthorized.  If you are not the intended recipient of this message, any
review, disclosure, copying, distribution, retention, or any action taken or
omitted to be taken in reliance on it is prohibited and may be unlawful.  If
you are not the intended recipient, please reply to or forward a copy of
this message to the sender and delete the message, any attachments, and any
copies thereof from your system.
****************************************************************************

-----Original Message-----
From: full-disclosure-admin@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx] On Behalf Of Stephen Taylor
Sent: Saturday, July 24, 2004 1:20 AM
To: 'Phuong Nguyen'; 'Marcel Krause'
Cc: full-disclosure@xxxxxxxxxxxxxxxx
Subject: RE: [Full-Disclosure] Crash IE with 11 bytes ;)

I don't understand the effect it has on Mozilla.  It certainly crashed my IE
but for Mozilla, the URL window displayed a diamond shape with a red "X"
through it. Mozilla was unresponsive afterwards. I had to close the window
to recover.  I am a W2K user at work.
ST

-----Original Message-----
From: full-disclosure-admin@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx]On Behalf Of Phuong
Nguyen
Sent: Friday, July 23, 2004 1:49 PM
To: Marcel Krause
Cc: full-disclosure@xxxxxxxxxxxxxxxx
Subject: Re: [Full-Disclosure] Crash IE with 11 bytes ;)


Oh, I actually didn't know about that! Coolio ;) !!

Phuong

At 12:47 AM 7/24/2004, Marcel Krause wrote:
>Hi!
>
>There is a similar Bug using about:<input%20type%20crash> .
>Well i think that's old news to you :)
>
>Yours, Marcel



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html