[Full-Disclosure] Internet Explorer crash bugs

From: Richard M. Smith (rms_at_computerbytesman.com)
Date: 05/27/03

Next message: Paul Szabo: "[Full-Disclosure] Re: Eudora 5.2.1 attachment spoof"

Previous message: K. K. Mookhey: "[VulnWatch] NII Advisory - Buffer Overflow in Analogx Proxy"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: "'Full-Disclosure@Lists. Netsys. Com'" <full-disclosure@lists.netsys.com>
Date: Mon, 26 May 2003 22:01:58 -0400

Hi,

Do any of these crash bugs in Internet Explorer 6 represent security
holes?

http://www.computerbytesman.com/js/debug/?(new%20Image()).attributes.id
http://www.computerbytesman.com/js/debug/?window.open("about:blank")%20
http://www.computerbytesman.com/js/debug/?window.open
http://www.computerbytesman.com/js/debug/?alert
http://www.computerbytesman.com/js/debug/?document.write

Richard

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Next message: Paul Szabo: "[Full-Disclosure] Re: Eudora 5.2.1 attachment spoof"

Previous message: K. K. Mookhey: "[VulnWatch] NII Advisory - Buffer Overflow in Analogx Proxy"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: [Full-disclosure] Gadi Bashing, enough already....
... Richard Golodner ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
(Full-Disclosure)
RE: [Full-Disclosure] Email for sans.org?
... Any idea who is receiving email messages being sent to sans.org? ... Richard ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
(Full-Disclosure)
RE: [Full-Disclosure] Email marketing company gives out questionable security advice
... just 30 percent of e-mail recipients support rich media. ... Richard ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
(Full-Disclosure)
RE: [Full-Disclosure] AV "feature" does more DDoS than Sobig
... it's important to get these false AV warning messages shut ... Richard ... Full-Disclosure - We believe in it. ... Charter: http://lists.netsys.com/full-disclosure-charter.html ...
(Full-Disclosure)
Re: [Full-disclosure] List of Fuzzers
... int authenticate(char* username, char* password) { ... that fuzzing has its limitations (that can be fixed and applied like ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure- ...
(Full-Disclosure)