[33172] in bugtraq
Re: [Full-Disclosure] RE: Internet Explorer - Multiple Vulnerabilities
daemon@ATHENA.MIT.EDU (Berend-Jan Wever)
Wed Jan 21 19:30:33 2004
Message-ID: <000f01c3e025$2dda7850$0100a8c0@grotedoos>
From: "Berend-Jan Wever" <SkyLined@edup.tudelft.nl>
To: <bugtraq@securityfocus.com>
Cc: <ntbugtraq@listserv.ntbugtraq.com>, <full-disclosure@lists.netsys.com>
Date: Wed, 21 Jan 2004 14:47:57 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
I looked into the "buffer overflow": it's actually a stack overflow. This
means Outlook Express just runs out of stack space and terminates. Nothing
is overwritten, this is not exploitable to gain unauthorized access or
elevate priviledges.
Cheers,
SkyLined
> These are not IE vulnerabilities.
>
> In all, you have described several ways to do some basic ressource
> exhaustion by using Internet Explorer as well as an abnomaly in the Apache
> server and a possible exploitable buffer overflow in Outlook Express. The
> latter is definitely interesting, provided it is exploitable at all, but
the
> first items are not security vulnerabilities - details below.
