RE: [Full-Disclosure] msxml3.dll Parsing Error Crashes Internet Explorer Remotely Upon Refresh

Looks to be fixed:

The XML page cannot be displayed
Cannot view XML input using XSL style sheet. Please correct the error and
then click the Refresh button, or try again later.

----------------------------------------------------------------------------

----
A name was started with an invalid character. Error processing resource
'http://theinsider.deep-ice.com/xmlcrash.xml'. Lin...
<Ref href = "&"/>
--------------^
 
Msxml3.dll version: 8.40.9419.0
IE version: 6.0.3790.0
-----Original Message-----
From: full-disclosure-admin@lists.netsys.com
[mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of Rafel Ivgi,
The-Insider
Sent: Monday, May 10, 2004 2:28 PM
To: bugtraq
Subject: [Full-Disclosure] msxml3.dll Parsing Error Crashes Internet
Explorer Remotely Upon Refresh
msxml3.dll crashes after refreshing a page which contains & inside a
link/value
For Example : <Ref href = "&"/>
This is due to a parsing error in msxml3.dll.
Version Details:
---------------------
I.E Version: 6.0.2600.0
ModVer: 8.10.8308.0
Module name: msxml3.dll
Offset: 000b8c10
Stack Dump:
-----------------
EAX=01CEE800
EDI=01D02580
EBX=00000000
EBP=02C3F3E4
ECX=00000000
ESP=02C3FC74
EDX=02D91364
EIP=02E18C10
ESI=00000000
DS:00000004     GS:0000     ES:0023     SS:0023     CS:001B
Live Example:
http://theinsider.deep-ice.com/xmlcrash.xml
AND REFRESH...
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html