[Full-disclosure] Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing.

Advisory : Internet Explorer Zone Domain Specification Dos and Page
Suppressing
Severity : Intermediate
Version : IE 6.0 - 7.0
Dated : 18 June 2007


Explanation:
The vulnerability is present in handling of domain names with different
parameters [ sub domains] when specified in the Intranet zone and
Restricted zone with different characters [* ,.]. TheInternet Explorer
show weird behavior in opening of those websites. The problem occurs in
loading of those websites there by resulting in DoS through the browser.
The problem occurs in resolving domain names in different zones by the
explorer. It can be launched remotely by a malicious attacker by
exploiting this vulnerable behavior through a rogue script and registry
functions. The problem persists if rogue entries or manipulated entries
are subjected into various zones.


So when a new instance of IE is loaded , the registry entries are
triggered up there by resulting in security impacts. The website page
gets suppressed. The page gets hanged for sometime , there
by showing a delay in loading of website and affects the CPU load.

Vendor Status : Reported To Microsoft Security Center.

Solution By Microsoft Security Center:
1. Avoid visiting untrusted Websites.
2. Script Restriction should be applied.

-----
Aditya K Sood
http://www.secniche.org




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing.
    ... Internet Explorer Zone Domain Specification Dos and Page ... The vulnerability is present in handling of domain names with different ... loading of those websites there by resulting in DoS through the browser. ...
    (Bugtraq)
  • [NT] Dotless IP Addresses Can Cause IE to Move into Intranet Zone
    ... Dotless IP Addresses Can Cause IE to Move into Intranet Zone ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... The third is a new variant of a vulnerability discussed in Microsoft ...
    (Securiteam)
  • SpywareBlaster and Spybot Search & Destroy.
    ... For reasons I don't understand the original message dated 1 March 2007 together with a response from PA Bear has "disappeared" from this newsgroup. ... Scripted websites which I absolutely ... zone anymore but instead trying to open in the Internet zone. ... Spywareblaster and Spybot S&D and was pleasantly surprised that the websites ...
    (alt.comp.anti-virus)
  • Re: Serious vulnerabilities (security hole) in IE6
    ... the original vulnerability in the Trusted Sites zone as well as the Internet ... assuming people have predictable domains in their "Trusted Sites" ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • 10 Month Old Vulnerability Continues to Be Core For Exploits
    ... Microsoft needs to decide whether THAT is in fact a ... vulnerability or a feature because without it ... For those not up on these cross zone scenarios... ... internet or restricted zone to the local zone. ...
    (Bugtraq)