Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005)

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005)
From: Benton Lam <calyth@xxxxxxxxx>
Date: Mon, 30 May 2005 11:00:28 -0400
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=e6kPsjYQ48XFNS+NrOdTCO9hvN26P4Ke/Ib3z5GvjzJ2R25Jup3WWXFdZhkgxUo7hiXv0zGyFClYyTQd4uYg0UgeqDXEaVkG9UAnddJKItmAa7s/8HW4ZSLCUXfKItZWaAxdUQxG6UukW65sTBqi91FlQsd8hHvpBiCm38OAm4E=
In-reply-to: <0b5d01c56390$f4e97c30$6582fe91@namea0073fcd77>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <0b5d01c56390$f4e97c30$6582fe91@namea0073fcd77>
Reply-to: Benton Lam <calyth@xxxxxxxxx>

Crash confirmed to work on Windows 2000 machine with IE6 6.0.2800.1106
(I believe that would be IE6 SP1).
Said Win2k box is fully patched.

References:
- Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005)
  - From: Benjamin Tobias Franz