denny: Photo of my face in profile - looking to the right (Default)
[personal profile] denny
This page will crash Internet Explorer. This is quite possibly the single most pathetic Microsoft bug I've seen yet  :)

(yoinked from [livejournal.com profile] olithered's journal)

Update: apparently this will also crash Outlook and anything else which uses that library to render HTML content. I feel a .sig coming on ;)

(no subject)

Date: 2003-05-06 06:56 am (UTC)
From: [identity profile] robinbloke.livejournal.com
I sense a patch... ;)

(no subject)

Date: 2003-05-06 06:56 am (UTC)
From: [identity profile] sartori666.livejournal.com
Hey you're right. LOL.

Now I can't get back into anything. I'll have to wait till tomorrow.

(no subject)

Date: 2003-05-06 06:59 am (UTC)
zotz: (Default)
From: [personal profile] zotz
It's not a bug, though, is it? It's clearly been implemented clearly and purposefully by someone, for reasons that presumably seemed to make sense at the time.

Reminds me a bit of the BBC Micro's undocumented "on error crash" statement.

(no subject)

Date: 2003-05-06 07:09 am (UTC)
From: [identity profile] dennyd.livejournal.com
The guy who posted it to Security Focus says it's a fucked up pointer - which doesn't sound like a deliberate behaviour to me:
http://www.securityfocus.com/archive/1/319360/2003-04-20/2003-04-26/0

(no subject)

Date: 2003-05-06 07:16 am (UTC)
zotz: (Default)
From: [personal profile] zotz
Well, assuming that it's specifically recognising the keyword "crash", doesn't it strike you as odd that it does exactly that, in a relatively non-exploitable way?

Given that it's doing exactly what it's told to do, I'd guess that it's deliberate.

(no subject)

Date: 2003-05-06 07:19 am (UTC)
From: [identity profile] dennyd.livejournal.com
Mine doesn't use the word 'crash' - it uses 'microsoftsucks'. You can put anything as the last symbol apparently.

(no subject)

Date: 2003-05-06 07:21 am (UTC)
From: [identity profile] olithered.livejournal.com
The word isn't important. Anything invalid will work...

(no subject)

Date: 2003-05-06 07:31 am (UTC)
zotz: (Default)
From: [personal profile] zotz
Fair enough. That wasn't mentioned in the articles I read, for some reason, and as we don't have IE in the house any more, I haven't tested it.

(no subject)

Date: 2003-05-06 07:00 am (UTC)
From: [identity profile] denari.livejournal.com
Doesn't crash mine, just a 404 not found...

(no subject)

Date: 2003-05-06 07:03 am (UTC)
From: [identity profile] dennyd.livejournal.com
Hrm... can you see http://btsuck.org/ ?

Some people seem to have DNS issues with that address... if that doesn't work for you, try http://www.btsuck.org/lmao.html instead.

(no subject)

Date: 2003-05-06 07:12 am (UTC)
From: [identity profile] adjectivemarcus.livejournal.com
Opera gets confused too - it showed the page and then closed...

(no subject)

Date: 2003-05-06 07:19 am (UTC)
From: [identity profile] dennyd.livejournal.com
That's pretty odd, such a daft bug in two unrelated browsers. Little bit of code theft around there, perhaps? I wonder in which direction  :)

(no subject)

Date: 2003-05-06 07:20 am (UTC)
From: [identity profile] olithered.livejournal.com
what version?
6.05 seemed to cope ok for me...

(no subject)

Date: 2003-05-06 07:48 am (UTC)
From: [identity profile] adjectivemarcus.livejournal.com
Three point six two.

(no subject)

Date: 2003-05-06 07:42 am (UTC)
From: [identity profile] naath.livejournal.com
Uh, what is it supposed to be? Opera opens it, but it's just a text box.... unless text boxes now crash M$ crap.

(no subject)

Date: 2003-05-06 07:50 am (UTC)
From: [identity profile] dennyd.livejournal.com
It's a short piece of mildly invalid HTML, that Mozilla/Opera/etc render as a text input box, and IE crashes at the sight of. Have a look at the source code for the page, it's that simple.

Re:

Date: 2003-05-06 08:32 am (UTC)
From: [identity profile] naath.livejournal.com
*snerk*

(no subject)

Date: 2003-05-06 08:28 am (UTC)
From: [identity profile] feanelwa.livejournal.com
Well I had the sense not to click on it. *smug*
*bounces about in happy little world of broadband that still works. FSVO "works"*

(no subject)

Date: 2003-05-06 09:28 am (UTC)
From: [identity profile] the-lady-lily.livejournal.com
Well I had the sense not to click on it. *smug*

Ditto. When people tell you not to click on things, there's generally a reason...

Such as it doing bad things to computers that are not yours and then needing major explaining away to scary sysadmin types...

Yes. Anyway.

(no subject)

Date: 2003-05-06 08:43 am (UTC)
From: [identity profile] duncanneko.livejournal.com
*looks at source code*
*rolls around laughing*

Oh dear oh dear oh dear. And I thought the Infinite Popups was bad *grins*

a true MS classic, that...

(no subject)

Date: 2003-05-07 07:43 am (UTC)
From: [identity profile] rathenar.livejournal.com
Out of curiosity, how does the infinite popup thing work?

(no subject)

Date: 2003-05-06 12:00 pm (UTC)
barakta: (Default)
From: [personal profile] barakta
Good innit!

I tested it out on my windoze install which has IE and OE. I still use IE in windows cos using moz for email and browsing chews up all my RAM. It killed OE nicely tho. ;)

I wonder if even posting that link is technically covered under the misuse of computers act - evil piece of legislation if i ever saw one. Still cool tho.

As tempting as it is to send it to my family to demonstrate the stupidity of Microsoft Products I'd only end up having to fix the mess or something. Apparently iot kills anything which uses the MS HTML rendering engine!!!

Whoopsie daisy.... Beats the latest OSX bug which kernel panicked my mac while using a usb hub!

Natalya

May 2020

S M T W T F S
     12
3456789
10111213141516
17181920212223
2425262728 2930
31      

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags