Microsoft DebugDiag 1.0 'CrashHangExt.dll' ActiveX Control Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31996/info Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the...

Null pointer dereference

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

Microsoft DebugDiag CrashHangExt.dll ActiveX控件拒绝服务漏洞

BUGTRAQ ID: 31996 CVECAN ID: CVE-2008-4800 调试诊断工具（DebugDiag）用于排除Win32用户态进程中挂起、内存泄露或崩溃等故障。 DebugDiag所提供的CrashHangExt.dll没有正确地验证某些输入参数，如果用户受骗访问了恶意网页的话，就会在使用该控件的应用（通常为IE）中触发空指针引用，导致拒绝服务的情况。 Microsoft DebugDiag 1.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2008-4800

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

CVE-2008-4800

The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service NULL pointer dereference and Internet Explorer 6.0 crash via a large negative integer argument to the GetEntryPointForThread method. NOTE: this...

Microsoft DebugDiag 1.0 - CrashHangExt.dll ActiveX Control Remote Denial of Service

Microsoft DebugDiag 1.0 - CrashHangExt.dll ActiveX Control Remote Denial of Service source: https://www.securityfocus.com/bid/31996/info Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful...

Microsoft DebugDiag 1.0 - 'CrashHangExt.dll' ActiveX Control Remote Denial of Service

source: https://www.securityfocus.com/bid/31996/info Microsoft DebugDiag 'CrashHangExt.dll' ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error. A successful attack allows a remote attacker to crash the application using the ActiveX control...

debugdiag-null.txt

Name : DebugDiag CrashHangExt.dll 1.0 NULL Pointer Dereference Credit : suN8Hclf DaRk-CodeRs Group, [email protected] Download : http://www.microsoft.com/downloads/details.aspx?FamilyID=28bd5941-c458-46f1-b24d-f60151d875a3&displaylang=enOverview Greetz : Luigi Auriemma, Louis Carriere, 0in,...