Re: Remote overflow in MSIE script action handlers (mshtml.dll)

To: "Michal Zalewski" <lcamtuf@xxxxxxxxxxxx>
Subject: Re: Remote overflow in MSIE script action handlers (mshtml.dll)
From: "Daniel Bonekeeper" <thehazard@xxxxxxxxx>
Date: Thu, 16 Mar 2006 16:02:59 -0500
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=mCvaP2BxJtJcJt9mTR9AOIieY5mn33dVmLfQD1Ls0Ye0PztouWy6Ieh3KzBoUwQgMjI2KtL5lrB8QC4Ru4E2I6AMH50ycMwCV7cLAI9FeP50oGJ/PUFYXoHnX3kAewJdfXDdaIxT4PJQkI1qGWSNbdJdGGenaMYAG75Oq4e/b0A=
In-reply-to: <Pine.LNX.4.58.0603161934461.5180@dione>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <Pine.LNX.4.58.0603161934461.5180@dione>

BTW, tested the POC on MSIE (File Version = 6.00.2900.2180
(xpsp_sp2_rtm.040803-2158))
with mshtml.dll (6.00.2900.2802 (xpsp_sp2_gdr.051123-1230)) and it
didn't worked.

--
What this world needs is a good five-dollar plasma weapon.

Follow-Ups:
- Re: Remote overflow in MSIE script action handlers (mshtml.dll)
  - From: Michal Zalewski

References:
- Remote overflow in MSIE script action handlers (mshtml.dll)
  - From: Michal Zalewski

Prev by Date: Re: Remote overflow in MSIE script action handlers (mshtml.dll)
Next by Date: [SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution
Previous by thread: Remote overflow in MSIE script action handlers (mshtml.dll)
Next by thread: Re: Remote overflow in MSIE script action handlers (mshtml.dll)
Index(es):
- Date
- Thread