Microsoft Internet Explorer Frameset Denial of Service Vulnerability

Microsoft Internet Explorer Frameset Denial of Service Vulnerability

"Microsoft Internet Explorer is affected by a denial-of-service
vulnerability. This issue arises because the application fails to handle
exceptional conditions in a proper manner.

An attacker may exploit this issue by enticing a user to visit a malicious
site and then to click anywhere on the page. This results in a
denial-of-service condition in the application.

Internet Explorer version 6 is vulnerable to this issue; earlier versions
may also be affected."

http://www.securityfocus.com/bid/18277/discuss

-- Imhotep

imhotep

imhotep wrote:

> http://www.securityfocus.com/bid/18277/discuss

Frame-set where a frame tries to resize itself crashes IE.

[X] Tell news.

Sebastian Gottschalk

Sebastian Gottschalk wrote:

> imhotep wrote:
>
>> http://www.securityfocus.com/bid/18277/discuss
>
> Frame-set where a frame tries to resize itself crashes IE.
>
> [X] Tell news.


....wait a month and it will be a buffer overun vulnerability!

Im

imhotep

imhotep wrote:

>> Frame-set where a frame tries to resize itself crashes IE.
>>
>> [X] Tell news.
>
> ....wait a month and it will be a buffer overun vulnerability!

Pretty unlikely that this could turn out as such.

Sebastian Gottschalk

Sebastian Gottschalk wrote:

> imhotep wrote:
>
>>> Frame-set where a frame tries to resize itself crashes IE.
>>>
>>> [X] Tell news.
>>
>> ....wait a month and it will be a buffer overun vulnerability!
>
> Pretty unlikely that this could turn out as such.

....and why do you say this?


-- Imhotep

imhotep

imhotep wrote:
> Sebastian Gottschalk wrote:
>
>> imhotep wrote:
>>
>>>> Frame-set where a frame tries to resize itself crashes IE.
>>>>
>>>> [X] Tell news.
>>> ....wait a month and it will be a buffer overun vulnerability!
>> Pretty unlikely that this could turn out as such.
>
> ....and why do you say this?

Would you please take a close look on the exploit? And maybe at the
relevant part of the source code? It's a simple assertation error.

Sebastian Gottschalk

Sebastian Gottschalk wrote:

> imhotep wrote:
>> Sebastian Gottschalk wrote:
>>
>>> imhotep wrote:
>>>
>>>>> Frame-set where a frame tries to resize itself crashes IE.
>>>>>
>>>>> [X] Tell news.
>>>> ....wait a month and it will be a buffer overun vulnerability!
>>> Pretty unlikely that this could turn out as such.
>>
>> ....and why do you say this?
>
> Would you please take a close look on the exploit? And maybe at the
> relevant part of the source code? It's a simple assertation error.

....I don't doubt it. I am saying what else can be done with it? Put on
your ""creative hat"....most coding errors can be expolited...

Im

imhotep