Yet Another Internet Explorer Crash

Yet another Internet Explorer crash has been discovered! This one is incredibly simple to reproduce, but doesn’t look (easily) exploitable because it’s a null pointer write.
To reproduce, simply load a page containing

<html>
<form>
<input type crash>
</form>
</html>

That’s it! I’ve set one up here. Don’t click it if you are using Internet Explorer!

It also affects Outlook, Frontpage, and a few others.

See the BugTraq Listing for details.

2 thoughts on “Yet Another Internet Explorer Crash

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.