not true with IEX 5.50.4807.2300CO --- j_h > -----Original Message----- > From: Benjamin Tobias Franz [mailto:0-1-2-3@xxxxxx] > Sent: Saturday, May 28, 2005 4:24 PM > To: bugtraq@xxxxxxxxxxxxxxxxx > Subject: Microsoft Internet Explorer - Crash on adding sites to > restricted zone (05/28/2005) > > > Microsoft Internet Explorer - Crash on adding sites to restricted zone > (05/28/2005) > > Description: > There is a bug in Microsoft Internet Explorer, which causes a crash in > URLMON.DLL. > - EventType : BEX - P1 : IEXPLORE.EXE - P2 : 6.0.2900.2180 > - P3 : 41107b81 - P4 : urlmon.dll - P5 : 6.0.2900.2627 - P6 : 422fff74 > - P7 : 0005bf61 - P8 : c0000409 - P9 : 00000000 > The bug occurs, because Microsoft Internet Explorer can't > handle adding of > special-formed URLs to restricted zone. To get a crash, the > URL must begin > with numbers and dots (like a correct IP address), but it > mustn't end like a > IP address. > > Affected software: > Microsoft Internet Explorer > > Workaround: > Don't add such URLs to any zone. > > Proof-of-Concept exploit: > Add to restricted zone: 4.3.2.1btf-errorreporting.btf.de > > Date of discovery: > 20. April 2005 > > Tested software: > Microsoft Internet Explorer 6 SP2 > (6.0.2900.2180.xpsp_sp2_gdr.050301-1519) > on a fully patched Windows XP SP2 system. > > DLL versions: > MSHTML.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648) > BROWSEUI.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648) > SHDOCVW.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648) > SHLWAPI.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648) > URLMON.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648) > WININET.DLL: 6.00.2900.2627 (xpsp_sp2_gdr.050309-1648) > > > Regards, > > Benjamin Tobias Franz > Germany >
