IE goodies

RIV@NVX · Apr 23, 2003, 11:05 AM

I found this at MozillaZine.org forum, it is originally posted here.

Quote:

Hola:

Well, as it seems that is the Microsoft Crash mounth, let see another one:

---------------------------------

<html>
<form>
<input type crash>
</form>
</html>

---------------------------------

This will crash IE with the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

It's a null pointer overwrite, so it's not easly exploitable...

This HTML also crash Outlook, Frontpage, and all the Microsoft
programs that use the shlwapi.dll library to render web code.

Plain HTML is a dangerous language

--
Saludos,

Ramon Pinuaga Cascales
mailto:rpinuaga@s21sec.com
Analista de Seguridad Telematica
Tfno: 620921960

--

Matth · Apr 23, 2003, 04:20 PM

Presumably Mozilla just shrugs it off?

Or should it have the option to behave in the same way as IE

Jeff · Apr 25, 2003, 07:31 PM

Weird bug.

-={420}=- · Apr 25, 2003, 09:19 PM

All you need is:
<input type crash>

It works the same way. Check my website, I put it on there.

Andrew275 · Apr 26, 2003, 04:22 AM

I find that pretty funny, for some little HTML bit to be able to crash IE.

Vampyromaniac · Apr 26, 2003, 05:16 AM

crashes if you put anything after <input

at least, in IE5

-={420}=- · Apr 26, 2003, 07:03 AM

Anything after <input type or just <input type> crashes IE. I tried a lot of words and characters with <input and that doesn't crash IE. I have version 6.0.2800.1106.xpsp2.021108-1929.

kuzujanakis · May 1, 2003, 02:57 PM

Thanks for the info, it makes for a good practical joke!

Apr 25, 2003, 07:31 PM	#3
Jeff Yarr... I be blind! Join Date: May 2002 Location: Calgary, Canada Posts: 3,191 Rep Power: 80	Weird bug. __________________

Apr 25, 2003, 09:19 PM	#4
-={420}=- DriverHeaven Senior Member Join Date: Sep 2002 Posts: 1,095 Rep Power: 0	All you need is: <input type crash> It works the same way. Check my website, I put it on there. __________________ [COLOR=red]My eBay Auctions[/COLOR]

Apr 26, 2003, 07:03 AM	#7
-={420}=- DriverHeaven Senior Member Join Date: Sep 2002 Posts: 1,095 Rep Power: 0	Anything after <input type or just <input type> crashes IE. I tried a lot of words and characters with <input and that doesn't crash IE. I have version 6.0.2800.1106.xpsp2.021108-1929. __________________ [COLOR=red]My eBay Auctions[/COLOR] Last edited by -={420}=-; Apr 26, 2003 at 07:23 AM.

Apr 23, 2003, 04:20 PM	#2
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	Presumably Mozilla just shrugs it off? Or should it have the option to behave in the same way as IE

Apr 26, 2003, 04:22 AM	#5
Andrew275 Custom User Title Join Date: May 2002 Location: Washington Posts: 1,125 Rep Power: 0 System Specs	I find that pretty funny, for some little HTML bit to be able to crash IE.

Apr 26, 2003, 05:16 AM	#6
Vampyromaniac confutatis maledictis Join Date: May 2002 Location: somewhere dark Posts: 5,974 Rep Power: 77 System Specs	crashes if you put anything after <input at least, in IE5

May 1, 2003, 02:57 PM	#8
kuzujanakis DriverHeaven Junior Member Join Date: May 2003 Posts: 23 Rep Power: 0	Thanks for the info, it makes for a good practical joke!