OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: IE Crash - Anyone Seen This Before?

From: Adam [Onet] (silentsupporterpoczta.onet.pl)
Date: Sat May 15 2004 - 16:45:42 CDT


it crashes on Windows XP, IE60 SP1

it seems that there's a bug in MSHTM.DLL - I believe there's a lack of
checking
if the ptr is NULL while trying to access ptr to one of the virtual methods
- this is the exact code that makes the program to crash:

mov ecx,[eax+2ch]

where eax is a ptr to the potential VMT (I believe) which is null in the
case

best regards
Adam

----- Original Message -----
From: "Nick Benson" <cryptic_maulerlinuxmail.org>
To: "xarabas" <news_security_readeremail.it>
Cc: <vuln-devsecurityfocus.com>
Sent: Saturday, May 15, 2004 4:38 PM
Subject: Re: IE Crash - Anyone Seen This Before?

> Windows 2000 Professional
> Internet Explorer
> Version : 6.0.2800.1106
> Update Versions: SP1, Q832894, Q330994, Q837009, Q831167
>
> It crashs on that. I had some friends with XP test and for some it didnt
crash them.
>
> --
> ______________________________________________
> Check out the latest SMS services http://www.linuxmail.org
> This allows you to send and receive SMS through your mailbox.
>
>
> Powered by Outblaze