MS Internet Explorer 6.0 (mshtml.dll checkbox) Crash

ID SSV:15939
Type seebug
Reporter Root
Modified 2006-03-22T00:00:00


No description provided by source.

Stelian Ene:

I can't find any info on this delicious IE bug, but it seems to be publicly known:

It will badly access a (virtual?) pointer table, making EIP to jump at a random
address. This has various effects on the system I've tested with, including
crashing. It works on these versions of mshtml.dll:
XP SP2: 6.0.2900.2802 - latest
WS2003: 6.0.3790.0

<input type="checkbox" id='c'>

# [2006-03-22]