Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Microsoft Internet Explorer "window()" Denial of Service Weakness
secunia.org ^

Posted on 05/31/2005 1:21:56 PM PDT by frogjerk

click here to read article


Navigation: use the links below to view more comments.
first previous 1-20 ... 41-6061-8081-100101-102 next last
To: frogjerk
Microsoft Internet Explorer

Sounds vaguely familiar... I remember using that once, long ago...

61 posted on 06/02/2005 2:31:13 PM PDT by kevkrom ("Those who stand for nothing fall for anything." -- Alexander Hamilton)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lazamataz
I'm always looking for porn spam.

I'm perverted enough to look for SPAM porn.

62 posted on 06/02/2005 2:32:10 PM PDT by kevkrom ("Those who stand for nothing fall for anything." -- Alexander Hamilton)
[ Post Reply | Private Reply | To 9 | View Replies]

To: HEY4QDEMS
"Whenever I use IE6, it always quits when I press "alt+F4". hehehe"

Dang! The secrets out now.................

63 posted on 06/02/2005 2:37:04 PM PDT by litehaus
[ Post Reply | Private Reply | To 5 | View Replies]

To: shellshocked
What it means is that as much as I thrash and trash IE, I haven't found problems with it crashing.

Then you're either really trying to stretch the boundaries of credibility, or you're not really trying. Granted, I'm not a computer specialist, but have you tried the browser equivalent of "while(1) fork();"?

A while back, I hired a recent grad (the kid of a friend of a family member - big mistake) to redo my company's website. He had all sorts of flash fancyness and java goodies. The website looked great, but it wouldn't render correctly on anything other than explorer. More relevantly, it didn't run for more than a few mouse clicks before locking up explorer and windows with it (on every windows machine we tried). Surely if that kid could figure out ways of hosing explorer, you can too.

Eventually, my cad guy had to strip out the site and redo it (much more simply) from scratch. Now it's not fancy (little more than an online business card), but it works (and works on mozilla, netscape, and firefox as well).

64 posted on 06/02/2005 2:41:07 PM PDT by pillbox_girl
[ Post Reply | Private Reply | To 51 | View Replies]

To: pillbox_girl

"but have you tried the browser equivalent of "while(1) fork();"?"


You're right, you aren't a computer scientist.


65 posted on 06/02/2005 3:11:07 PM PDT by shellshocked (They're undocumented Border Patrol agents, not vigilantes.)
[ Post Reply | Private Reply | To 64 | View Replies]

To: shellshocked
I use google maps daily and have had no problems. I bet this is user error. Google takes a second or two to respond and you jump around saying IE is "locked up!"

Um. No. And please don't invent little scenarios to support your point. If you have nothing, then just admit you don't know. Again, it's amazing the lengths some people will go to to defend their precious microsoft.

I mention google maps because it's consistent, and almost identical to the problems we were having with my company's old "new" website, and can be accessed and tested by other people (our old website now only exists on a backup CD).

Here are the actual symptoms. It runs fine, for a while. But if I stay connected to the site for too long, when I go to close the window, it locks up. It doesn't matter if I try the close button, the close command from the window, Alt-F4, or whatever. The same thing happens. The window stays put and the mouse and keyboard lock up. And are still locked up a hour later. The machine responds to pings from the network, but nothing else. The only cure is a power cycle.

The same thing happened with my old "new" company website. It did it on both dells, the hp, and the old cad machine (the new cad machine came later). These are work machines, and do not have gimmick devices like webcams and whatnot attached. We tried downgrading to windows 98, with the same result. The only thing we found that affected the lock up (and that only made it happen sooner) was reducing the memory by pulling DIMMS. The only machine we never got to crash with the old website was the laptop of the kid who wrote it, and I suspect that was because it had a gig of RAM installed (graduation present from his folks). My cad guy thinks it's a memory leak, either in explorer or windows. I'm inclined to agree.

Now, why don't you try explaining those symptoms instead of trying to attack me personally in your misguided quest to defend microsoft.

66 posted on 06/02/2005 3:11:19 PM PDT by pillbox_girl
[ Post Reply | Private Reply | To 60 | View Replies]

To: pillbox_girl

You seem to have a Unix mentality that wants to attack Microsoft. "precious"? How chick. I am not about to try to diagnose your problems, but it would seem you need a professional instead of trying to play one yourself. I bet you are a manager who is not qualified to do the job of her subordinates, right?


67 posted on 06/02/2005 3:15:42 PM PDT by shellshocked (They're undocumented Border Patrol agents, not vigilantes.)
[ Post Reply | Private Reply | To 66 | View Replies]

To: pillbox_girl
Oh please. Now that's stretching.

No it's not, you made a claim, and then had to back down from it. I simply pointed it out to others who mysteriously attacked me instead.

68 posted on 06/02/2005 3:30:09 PM PDT by Golden Eagle
[ Post Reply | Private Reply | To 58 | View Replies]

To: pillbox_girl
I don't need to. That's what this thread is, in fact all about.

No it's not, this thread is about someone who found a security vulnerability then provided exploit routines before ever notifying the vendor. There's no way in hell I'm ever going to click on that kind of link, LOL. However, if you have a non-infected respectable website that you think can crash our IE, please provide the link, we are skeptical and have been waiting.

69 posted on 06/02/2005 3:34:57 PM PDT by Golden Eagle
[ Post Reply | Private Reply | To 59 | View Replies]

To: js1138

No ads and popups are one reason I love FreeRepublic so much. Drudge is popup heaven, and until I started putting ad ips in my host file, I had stopped visiting his site.


70 posted on 06/02/2005 3:42:48 PM PDT by FreeAtlanta (never surrender, this is for the kids)
[ Post Reply | Private Reply | To 2 | View Replies]

To: shellshocked
Hmmm. Personal attacks instead of valid points. And also quite wrong.

You seem to have a Unix mentality that wants to attack Microsoft.

No. Claims like this are typical of the microsoft zealots I've seen; trying to dismiss people with valid complaints about microsoft by pigeonholing them into a nice little "unix" category.

All I did was mention that I have problems with microsoft products crashing, and then complained about all the people who were so quick to blindly defend microsoft and attack me instead of actually admitting microsoft products have problems (of which this very thread is proof).

And just what the heck is a "unix mentality"? The first computer I used ran CP/M. The first "real" computer operating systems I used was VMS. Almost all my company's computers run windows. The CAM machines on the floor mostly still run plain old DOS or their own machine specific system. The only unix machine I commonly work with is the new cad machine.

How chick.

Huh? What are you trying to say here?

I am not about to try to diagnose your problems,

Then maybe you're not the hot computer guru I though (and you think) you are.

I bet you are a manager who is not qualified to do the job of her subordinates, right?

Um. No. Completely wrong.

I own the company. We do custom metal parts fabrication. And I have several engineering degrees (just not in computers). I am qualified to, and often have to, do every task needed to run this company. Yes, I have hired people who are better than me at some tasks (it would be foolish to hire less qualified people), but I'm the only person here who can do everything.

Monkeying around with computers and programming is not my company's business. We build things. For me, computers are tools. They are not a field of work in and of themselves. And like all tools, I've found no computer or operating system is good for everything. I really have no operating system preference so long as it gets the job done. As I said before, some of the CAM machines are connected to machines that are still running DOS on monochrome screens. Why? There is no need to replace or upgrade them; they still work well and it's not as if they'll ever need to do anything fancier.

As far as the whole microsoft versus unix thing. I kind of look at it like the whole Ford vs. Chevy rivalry. I personally drive neither, and I think the people who subscribe to the rivalry are twits.

It has been my experience that unix does not have either the broad level of software support or ease of use that microsoft provides. On the other hand, the applications unix does run, and the operating system itself, are a lot more stable and robust than I've ever seen on microsoft.

Oh, and on the subject of getting professional help, consider this: For the one problem we had with the new cad machine (bad graphic card out of the box), the vendor actually sent out their guy to fix it (and on their dime). It was fixed in one weekend. Every tme I've had problems with a microsoft product, I inevitably hear the same thing: the "problem" is that I haven't sent in an additional couple hundred dollars for the latest version (even when I AM running the latest version).

71 posted on 06/02/2005 4:58:30 PM PDT by pillbox_girl
[ Post Reply | Private Reply | To 67 | View Replies]

To: Golden Eagle
No it's not, this thread is about someone who found a security vulnerability

Um. No. It may be called a "security vulnerability", but it isn't. It's a crashing vulnerability. It doesn't cause explorer to run malicious code or open the computer to attack. It just crashes explorer. Go back and look.

72 posted on 06/02/2005 5:01:11 PM PDT by pillbox_girl
[ Post Reply | Private Reply | To 69 | View Replies]

To: pillbox_girl

It's malicious code planted by the author with the intent to disrupt or destroy. Got any normal respectable websites without malware being involved that you can point me to that will cause my IE to crash? If you say Google, I can attest I have used their site extensively including the new photo maps and have never had an issue. I'll be more than happy to contact them to see if they are aware their code is crashing the browser of 90% of the WWW users too.


73 posted on 06/02/2005 5:06:43 PM PDT by Golden Eagle
[ Post Reply | Private Reply | To 72 | View Replies]

To: Golden Eagle
since 50+% of my interface with computers is through IE,

You call yourself a professional and you admit you are still using IE? OK, whatever!

74 posted on 06/02/2005 5:09:05 PM PDT by SwordofTruth (God is good all the time.)
[ Post Reply | Private Reply | To 43 | View Replies]

To: Golden Eagle
There's no way in hell I'm ever going to click on that kind of link, LOL. However, if you have a non-infected respectable website that you think can crash our IE, please provide the link, we are skeptical and have been waiting.

Our IE? Who are you? Bill Gates?

75 posted on 06/02/2005 5:12:33 PM PDT by SwordofTruth (God is good all the time.)
[ Post Reply | Private Reply | To 69 | View Replies]

To: SwordofTruth

For your information, 70% of all servers and 90% of all desktops being shipped in today's market are preloaded with Microsoft products. And I was in this business before they even existed, so you can flyby with your laughable insults, or formally introduce yourself to the discussion. Either way, you'll find it tough going knocking holes in my credibility.


76 posted on 06/02/2005 5:15:36 PM PDT by Golden Eagle
[ Post Reply | Private Reply | To 74 | View Replies]

To: pillbox_girl

Given that nobody else seems able to reproduce your problems with Google maps, why don't you throw up this website of yours and see if anyone has the problems you report?


77 posted on 06/02/2005 5:16:03 PM PDT by general_re ("Frantic orthodoxy is never rooted in faith, but in doubt." - Reinhold Niebuhr)
[ Post Reply | Private Reply | To 66 | View Replies]

To: SwordofTruth
Our IE?

Read the thread, I'm far from the only one debunking her BS. We're all waiting for a respectable site not loaded with malware that crashes our IE. Why, do YOU have one?

78 posted on 06/02/2005 5:17:01 PM PDT by Golden Eagle
[ Post Reply | Private Reply | To 75 | View Replies]

To: calenel
Maybe it isn't MS OSs at all, but the junkware they put on their PCs.

If the OS was stable "junkware" wouldn't crash it.

79 posted on 06/02/2005 5:19:15 PM PDT by SwordofTruth (God is good all the time.)
[ Post Reply | Private Reply | To 54 | View Replies]

To: SwordofTruth

Come up with anything besides insults yet? Or did you just run off and hide.


80 posted on 06/02/2005 5:42:31 PM PDT by Golden Eagle
[ Post Reply | Private Reply | To 79 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-20 ... 41-6061-8081-100101-102 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson