A recently undiscovered feature of Microsoft’s flagship browser Internet Explorer has been exposed as of late.

Some might call it a bug, but in the tradition of IE’s feature list, this is right in line with things.

Not only that, but this wonderful feature can be exposed with just a simple line of code. Wasn’t it nice of Microsoft to make such a user friendly bug?

All it takes to activate this special feature is the following line:

<input type crash>

Take special note that ‘crash’ can in fact be replaced by anything. Say, ‘I own joo Bill Gates’, or ‘This copy of XP is pirated, bizatch’.

On a serious note, it appears that this bug uncovers a null pointer overwrite, so it’s not a huge security vulnerability. It will crash IE and throw the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

More info can be found on Bugtraq.

Read the Full Article: Bugtraq

No tags for this poststyle="max-width:300px" />>A recently undiscovered feature of Microsoft’s flagship browser Internet Explorer has been exposed as of late.

Some might call it a bug, but in the tradition of IE’s feature list, this is right in line with things.

Not only that, but this wonderful feature can be exposed with just a simple line of code. Wasn’t it nice of Microsoft to make such a user friendly bug?

All it takes to activate this special feature is the following line:

<input type crash>

Take special note that ‘crash’ can in fact be replaced by anything. Say, ‘I own joo Bill Gates’, or ‘This copy of XP is pirated, bizatch’.

On a serious note, it appears that this bug uncovers a null pointer overwrite, so it’s not a huge security vulnerability. It will crash IE and throw the following error:

"Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access
Violation"

More info can be found on Bugtraq.

Read the Full Article: Bugtraq

No tags for this post.

This entry was posted on Thursday, May 8th, 2003 at 10:56 pm and is filed under News, and is tagged with . You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.