MSIE Crash Examples.

233
vote

While sifting through my offline browser vulnerabilities yesterday, I came across these ActiveXObject hacks. These are already known, and were found with a fuzzer, but they still work in Internet Explorer. I show them because they set a good example on how simple browser hacks can be, because not all vulnerabilities are complex. The examples below will crash Internet Explorer in a blink. These results in a NULL pointer dereference and an unhandled memory access violation.

Trackback URL for this post:

http://secgeeks.com/trackback/1220