[Full-Disclosure] Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer.

2004-12-20 Thread Berend-Jan Wever
I thought it looked familiar: http://lists.netsys.com/pipermail/full-disclosure/2004-May/021272.html It'll probably never get fixed. Berend-Jan Wever <[EMAIL PROTECTED]> http://www.edup.tudelft.nl/~bjwever SkyLined in #SkyLined on EFNET PGP key ID: 0x48479882 - Original Message - From: "

[Full-Disclosure] Re: Windows Explorer TGA Crash is a DoS bug in Internet Explorer.

2004-12-20 Thread Berend-Jan Wever
Tested on win2ksp4, IE6.0sp1 fully patched (hmmm... not really "fully" obviously ;)) It's a DoS, nothing exploitable. Explorer let's IE do the rendering in "thumbnail" previes mode. IE creates a HTML page and crashes while creating or rendering it. Same bug can be triggered easier with followin