Yeah about:<input%20type%20crash> did crash IE, on my win 2K system.

Even the following works in IE (not in Mozilla/5.0)

about:<script>alert('HI')</script>

arJun
 
****************************************************************************
The information in this email is confidential and may be legally privileged.
Access to this email by anyone other than the intended addressee is
unauthorized.  If you are not the intended recipient of this message, any
review, disclosure, copying, distribution, retention, or any action taken or
omitted to be taken in reliance on it is prohibited and may be unlawful.  If
you are not the intended recipient, please reply to or forward a copy of
this message to the sender and delete the message, any attachments, and any
copies thereof from your system.
****************************************************************************

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Stephen Taylor
Sent: Saturday, July 24, 2004 1:20 AM
To: 'Phuong Nguyen'; 'Marcel Krause'
Cc: [EMAIL PROTECTED]
Subject: RE: [Full-Disclosure] Crash IE with 11 bytes ;)

I don't understand the effect it has on Mozilla.  It certainly crashed my IE
but for Mozilla, the URL window displayed a diamond shape with a red "X"
through it. Mozilla was unresponsive afterwards. I had to close the window
to recover.  I am a W2K user at work.
ST

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Phuong
Nguyen
Sent: Friday, July 23, 2004 1:49 PM
To: Marcel Krause
Cc: [EMAIL PROTECTED]
Subject: Re: [Full-Disclosure] Crash IE with 11 bytes ;)


Oh, I actually didn't know about that! Coolio ;) !!

Phuong

At 12:47 AM 7/24/2004, Marcel Krause wrote:
>Hi!
>
>There is a similar Bug using about:<input%20type%20crash> .
>Well i think that's old news to you :)
>
>Yours, Marcel



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Reply via email to