[Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?

From: Marc Ruef (maru_at_scip.ch)
Date: 09/02/03

  • Next message: morning_wood: "Re: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?" 
    To: <full-disclosure@lists.netsys.com>
Date: Tue, 2 Sep 2003 09:12:10 +0200

     
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    Dear List

    I was looking for some sources that serve translations of Buce Schneiers well-known Crypto-Gram[1]. So I found on the official page the hint, that there are some outdated Issues in a german version available.

    After clicking in the link that brings me to http://www.galad.com/extras/cg/cg.htm , my Internet Explorer 6.0.2800.1106 "encounters a problem and needs to close". After a bit of debugging I could determine that the problem must be existing in the library mshtml.dll.

    I tried to do a small and dirty analysis of the problem. So I fetched the whole page that encounters the error, but I couldn't reproduce the program shutdown with the offline version. It doesn't matter if I keep the original linking and embedded pictures as a link to the original web source.

    Then I deactivated the Internet Explorers possibility of showing pictures (Tools/Internet Options/Advanced/Show pictures). And now the error message doesn't come again. So it seems to me that one of the pictures produce the failure.

    Again, I put all the graphics from the named page dedicated into the affected web browser (e.g. http://www.galad.com/frame/but0nr.gif ). But once more, I couldn't reproduce the error. Perhaps it is an interaction between HTML or JavaScript and a picture needed. It is very interesting, that other sub pages (e.g. http://www.galad.com/certify/mcse/mcse.htm ) or other browsers (e.g. Netscape Communicator 4.x, 6.x, and 7.x) are not affected.

    Can somebody help me to figure out the real problem? Or is this an old issue I can't recognize?

    Sincerely,

    Marc Ruef

    [1] http://www.counterpane.com/crypto-gram.html

    - --
    ) scip AG (
    Technoparkstr. 1
    8005 Zürich
    T +41 1 445 18 18
    F +41 1 445 18 19

    maru@scip.ch
    www.scip.ch - Publizierung aktuellster IT-Sicherheitsluecken -

    -----BEGIN PGP SIGNATURE-----
    Version: PGP 8.0

    iQA/AwUBP1RC+Re5hzJzqVMhEQKmDQCeM66Q8w/UqQBIi5FurZ7HpE6dMKYAmwdG
    aNlONsKvfe2L9xezEjl2plJ3
    =C9az
    -----END PGP SIGNATURE-----

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: morning_wood: "Re: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?"

    Relevant Pages

    • Re: Photo Story 3 - storage space, memory and... number of images?
      ... resolution picture with certain motion settings... ... If you zoom into any high rez pictures and pan across them ... slowly but staying tightly zoomed in, you'll use more memory than the ... the error message doesn't tell you the real reason.... ...
      (microsoft.public.windowsxp.photos)
    • Re: Pictures not showing in IE6
      ... I'm going check the ZoneAlarm site for any clues. ... Windows XP Shell/User ... ZoneAlarm Pro and the pictures appeared. ... > Pictures do not appear as expected, or you receive an error message when ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: cannot send an email with a photo attached to it
      ... I have now been able to easily email the pictures I wanted to send. ... Do you get an error message when you try to send? ... I don't know if loading Apple Quicktime has caused my mailing problem.This ... view movies taken with a Panasonic Lumix camera. ...
      (microsoft.public.windows.vista.mail)
    • Re: Pasting pictures doesnt work!
      ... When I open documents with pictures in them I get the tag ... MERGEFORMATINET}"; what do I do?! ... If I insert pictures from file I ... get the same error message or a blank box. ...
      (microsoft.public.word.newusers)
    • Re: Pictures not showing in IE6
      ... Windows XP Shell/User ... ZoneAlarm Pro and the pictures appeared. ... > Pictures do not appear as expected, or you receive an error message when ... > you open an HTML file on a Windows XP Service Pack 2-based computer ...
      (microsoft.public.windowsxp.help_and_support)