Thanks to antsy for the heads up on this
Just recently a piece of code has been making its way round the internet that allows people to open others CD drives by simply getting them to vist a website. Annoying as that was there is another piece of code which isn't even really all that advanced that will crash Internet Explorer with the error "Unhandled exception in iexplore.exe (SHLWAPI.DLL): 0xC0000005: Access Violation". Shockingly this line code is very easy to implement into any HTML.
The bug posted at BugTraq on the 21st of April is now spreading around the internet, so watch out for what URLs you click on from friends and in emails for now. The line of code is literally :
According to the post at BugTraq this line of code can also crash Outlook, Frontpage and all other Microsoft software that use shlwapi.dll to render HTML. Although this code is simply amazing it is simply a null pointer overwrite so it is not easily exploitable.
Let's hope Microsoft try to fix this as soon as possible.
View: View BugTraq post
