Code injection

mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service application crash by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second...

CVE-2009-2655

CVE-2009-2655 describes a denial-of-service vulnerability in mshtml.dll used by Microsoft Internet Explorer 7/8 on Windows XP SP3. The issue is triggered when the JavaScript findText method is called with a crafted Unicode string in the first argument and only one additional argument (e.g., a sec...

CVE-2009-2655

mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service application crash by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second...

Microsoft Internet Explorer 'findText()' Unicode解析拒绝服务漏洞

Bugraq ID: 35799 CNCAN ID：CNCAN-2009072503 Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在'findText' Unicode解析错误，远程攻击者可以利用漏洞使应用程序崩溃。 'findText'方法在处理特殊构建的包含unicode字符的参数时存在问题，构建恶意WEB页，诱使用户解析，可导致浏览器崩溃。 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7.0 厂商解决方案...

MS IE 7/8 findText Unicode Parsing Crash Exploit-a vulnerability warning-the black bar safety net

Mshtml.dll Impact: MS Internet Explorer 7/8 Crash Solution: unknown Danger level: low Description: The following error is test the latest version of Internet Explorer7/8 Copy the contents to the clipboard! Program code program code ! DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" ""...

MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit

No description provided by source. meta http-equiv="Context-Type" content="text/html; charset=US-ASCII" !-- Contact:[email protected],[email protected] Title: MS Internet Explorer findText Unicode Parsing error Vulnerability mshtml.dll Bug discovered: Hong10 PoC code: AmesianX & Hong10 Critical:...

Microsoft Internet Explorer Unicode Crash

IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit

Exploit for unknown platform in category dos / poc =============================================================== MS Internet Explorer 7/8 findText Unicode Parsing Crash Exploit =============================================================== IE findText crash Hit the button after ie7/8 crash...

Microsoft Internet Explorer 78 - findText Unicode Parsing Crash

Microsoft Internet Explorer 78 - findText Unicode Parsing Crash IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

Microsoft Internet Explorer 7/8 - findText Unicode Parsing Crash

IE findText crash Hit the button after ie7/8 crash.. function docrash var o1=document.createElement"input"; o1.type="text"; //or password o1.id="powerhacker"; o1.value="AAAA"; document.body.appendChildo1; var r= o1.createTextRange;...

IE Denial of Service Exploit ( mshtml.dll )

Hi, . . A nice bug into IE6 that run a crash "DOS" Exploit. !-- IE Denial of Service Exploit mshtml.dll . . Tested on IE6. !-- simply click on the file saved as /crash.html/ And after few seconds crashes ... -- !-- /Be safe. /cnaph. -- !-- Greetz to : Str0ke , Blub, etc . . . -- scriptfunction...

New DoS vulnerability in Microsoft Outlook

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Microsoft Outlook. Уязвимость находится в библиотеке mshtml.dll. DoS: Для атаки нужно выслать html-письмо на емайл пользователя Outlook, которое содержит в теле специальный код. При просмотре этого письма...

New DoS vulnerability in Outlook Express

Здравствуйте 3APA3A! Сообщаю вам о найденной мною новой Denial of Service уязвимости в Microsoft Outlook Express. Уязвимость находится в библиотеке mshtml.dll. DoS: Нужно выслать html-письмо на емайл пользователя Outlook Express, которое содержит в теле следующий код. dth1 style=width:1pxli/h1 Пр...

From the ie 0day to word 0day-vulnerability warning-the black bar safety net

ie7 这个 问题 出 在 mshtml.dll and if you have the impression, then, before the word is out by a javascript implementation of the problem, when everyone's ideas are executed js, but with js thought in word in the hidden adjusted with a html may be a little difficulty as if it is not an iframe or...

Design/Logic Flaw

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving 1 an XML Island, 2 XML DSOs, or 3 Tabular Data Control TDC in a craft...

CVE-2008-4844

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving 1 an XML Island, 2 XML DSOs, or 3 Tabular Data Control TDC in a craft...

IE7 0day vulnerability analysis-vulnerability warning-the black bar safety net

Yesterday accidentally see knownsec security team, sent the article, so you want to see in the end is how caused. This two days this IE7 the 0day quite hot, I also along for the ride, to be honest, don't be javascript, so the analysis is also quite strenuous, But generally know what is going on t...

Microsoft Internet Explorer DoS in Rendering Malicious PNG Files.

Microsoft Internet Explorer DoS in Rendering Malicious PNG Files. Version Affected: IE 7 / IE 8 BETA Severity: Intermediate Background: Mshtml.dll is a standard library which is responsible for rendering objects in web pages in Internet Explorer. Description: The Internet Explorer 7 is vulnerable...

Microsoft IE畸形PNG文件远程拒绝服务漏洞

BUGTRAQ ID: 31215 Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。 Internet Explorer中的Mshtml.dll库负责渲染网页中的对象。在加载畸形的PNG文件时，该库中的CDwnTaskExec::ThreadExec可能会陷入死循环，保持一直获取任务并同步运行，这样就无法完成任务。如果任务无法完成或超时的话，就会导致无法执行之后的任务。 Microsoft Internet Explorer 8.0.6001 Microsoft Internet Explorer 7.0.5730 Microsoft --------...

CVE-2008-4127

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service failure of subsequent image rendering via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function...