[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re[2]: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?
- To: zobel@xxxxxxxxxxxxx
- Subject: Re[2]: [Full-Disclosure] New Microsoft Internet Explorer mshtml.dll Denial of Service?
- From: nonleft@xxxxxxx
- Date: Tue, 2 Sep 2003 17:38:43 +0200 (MEST)
crashes on my side as well
win XP no packets in place.
so I run my debugger: (sorry german)
Der Thread 'Win32 Thread' (0x818) hat mit Code 0 (0x0) geendet.
Unbehandelte Ausnahme bei 0x00000005 in : 0xC0000005:
Zugriffsverletzung-Leseposition 0x00000005.
Eine Ausnahme (erste Chance) bei 0x00000005 in : 0xC0000005:
Zugriffsverletzung-Leseposition 0x00000005.
Unbehandelte Ausnahme bei 0x00000005 in : 0xC0000005:
Zugriffsverletzung-Leseposition 0x00000005.
well it tries to do a read function in the memory, were it has not business
to do :-)
and this causes the system failure and the program has to be restarted
7FFE02FC add byte ptr [eax],al
7FFE02FE add byte ptr [eax],al
7FFE0300 mov edx,esp
7FFE0302 sysenter
7FFE0304 ret
7FFE0305 pushfd
7FFE0306 or dword ptr [esp],100h
7FFE030D popfd
7FFE030E ret <---- here comes the downfall :-)
7FFE030F mov edx,esp
7FFE0311 syscall
7FFE0313 ret
7FFE0314 nop
7FFE0315 pushfd
7FFE0316 or dword ptr [esp],100h
so it comes from:
7ffe0304()
ntdll.dll!77f6f4af()
ntdll.dll!77f6e265()
mshtml.dll!74877f58()
> mshtml.dll!74877576()
that was it on my machine.....
reproduced it twice.
but i could not see what this behavior evoked in the html code?!?!
first i thought could have something to do with the embedded scripts, but
doesn't seem so....
btw not using Outlook (and i could not see why this should have something to
do with it)
mfg/kind regards
nonleft
At 13:53 02.09.2003 +0200, you wrote:
Hi,
> No, I am very sure that this happens also, if you follow the link inside
> a web page only (without an involving mail client).
> So go to http://www.counterpane.com/crypto-gram.html , scroll down and
> click the link that says "Holger Hasselbach has translated several
> issues of Crypto-Gram into German [...]". The error occurs as described
> in my original posting.
well i tried
windows 2003 server no updates
first time i clicked it page closed after 5 seconds
second time nothing happened
third time it closed after 5 seconds
well 4th time nothing happened
5th time closed again
eaach time i spawned a new ie-window with the link and then followed
the one in the bottom
mfg
Michel Zobel
Software Entwicklung
hnw health network GmbH i.G.
--
COMPUTERBILD 15/03: Premium-e-mail-Dienste im Test
--------------------------------------------------
1. GMX TopMail - Platz 1 und Testsieger!
2. GMX ProMail - Platz 2 und Preis-Qualitätssieger!
3. Arcor - 4. web.de - 5. T-Online - 6. freenet.de - 7. daybyday - 8. e-PostHTTP/1.1 200 OK
Date: Tue, 02 Sep 2003 15:21:25 GMT
Server: Apache
Last-Modified: Thu, 28 Aug 2003 19:52:06 GMT
ETag: "2dc9a-9cb7-3f4e5d66"
Accept-Ranges: bytes
Content-Length: 40119
Connection: close
Content-Type: text/html
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
<title>Counterpane: Crypto-Gram</title>
<link rel="STYLESHEET" type="text/css" href="cp.css">
<script></script>
<script src="scripts/cp-5.js"></script>
<script>
var nameMenus = new Array('menuCompany', 'menuServices', 'menuCustomers',
'menuNews', 'menuLibrary', 'menuSite', 'menuContact');
var menuImgNames = new Array();
menuImgNames['menuCompany'] = 'nav_4_company';
menuImgNames['menuServices'] = 'nav_4_services';
menuImgNames['menuCustomers'] = 'nav_5_customers';
menuImgNames['menuNews'] = 'nav_new_news';
menuImgNames['menuLibrary'] = 'nav_new_library';
menuImgNames['menuSite'] = 'nav_new_site';
menuImgNames['menuContact'] = 'nav_5_contact';
function init(){
loaded = true;
if (ns4) {
window.captureEvents(Event.RESIZE);
window.onresize = netscapeResize;
document.alinkColor="#666666";
document.vlinkColor="#666666";
}
else if (!ie4 && DOM) {
document.getElementById("menuCompany").style.display = "";
document.getElementById("menuServices").style.display = "";
document.getElementById("menuCustomers").style.display = "";
document.getElementById("menuNews").style.display = "";
document.getElementById("menuLibrary").style.display = "";
document.getElementById("menuSite").style.display = "";
document.getElementById("menuContact").style.display = "";
}
returnLayer("menuCompany");
returnLayer("menuServices");
returnLayer("menuCustomers");
returnLayer("menuNews");
returnLayer("menuLibrary");
returnLayer("menuSite");
returnLayer("menuContact");
}
</script>
</head>
<body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"
onLoad="init()" alink="#666666" vlink="#666666" bgcolor="#FFFFFF"
text="#000000">
<!-- top navigation ------------------------------------------>
<table width="100%" cellspacing="0" cellpadding="0" border="0">
<tr>
<!-- logo ------------------------------------------------>
<td width="146" bgcolor="#FFFFFF"><a href="index.html"><img
src="images/cplogo.gif" alt="COUNTERPANE LOGO" border="0" width="132"
height="87" hspace="5" vspace="15"></a><br>
<img src="images/clear.gif" alt="" border="0" width="146" height="10"
vspace=0 hspace=0></td>
<td width="100%" valign="top" align="left" height=70>
<!-- menu bar -->
<table width="100%" cellspacing="0" cellpadding="0" border="0">
<tr bgcolor="#001851">
<script language="JavaScript" type="text/javascript">
<!--
document.writeln('<td width="76"><a href="#"
onMouseover="menuOn(\'menuCompany\')"
onMouseout="overChecker(\'menuCompany\')"><img name="nav_4_company"
src="images/nav_4_company.gif" width="76" height="26" border="0"></a></td>');
document.writeln('<td width="78"><a href="#"
onMouseover="menuOn(\'menuServices\')"
onMouseout="overChecker(\'menuServices\')"><img name="nav_4_services"
src="images/nav_4_services.gif" width="78" height="26" border="0"></a></td>');
document.writeln('<td width="78"><a href="#"
onMouseover="menuOn(\'menuCustomers\')"
onMouseout="overChecker(\'menuCustomers\')"><img name="nav_5_customers"
src="images/nav_5_customers.gif" width="78" height="26" border="0"></a></td>');
document.writeln('<td width="78"><a href="#"
onMouseover="menuOn(\'menuNews\')" onMouseout="overChecker(\'menuNews\')"><img
name="nav_new_news" src="images/nav_new_news.gif" width="78" height="26"
border="0"></a></td>');
document.writeln('<td width="78"><a href="#"
onMouseover="menuOn(\'menuLibrary\')"
onMouseout="overChecker(\'menuLibrary\')"><img name="nav_new_library"
src="images/nav_new_library.gif" width="78" height="26" border="0"></a></td>');
document.writeln('<td width="78"><a href="#"
onMouseover="menuOn(\'menuSite\')" onMouseout="overChecker(\'menuSite\')"><img
name="nav_new_site" src="images/nav_new_site.gif" width="78" height="26"
border="0"></a></td>');
document.writeln('<td width="78"><a href="#"
onMouseover="menuOn(\'menuContact\')"
onMouseout="overChecker(\'menuContact\')"><img name="nav_5_contact"
src="images/nav_5_contact.gif" width="78" height="26" border="0"></a></td>');
//-->
</script>
<noscript>
<td width="76"><a href="#"><img alt="" src="images/clear.gif" width="76"
height="26" border="0"></a></td>
<td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78"
height="26" border="0"></a></td>
<td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78"
height="26" border="0"></a></td>
<td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78"
height="26" border="0"></a></td>
<td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78"
height="26" border="0"></a></td>
<td width="78"><a href="#"><img alt="" src="images/clear.gif" width="78"
height="26" border="0"></a></td>
<td width="70"><a href="sitemap.html"><img alt="SITE MAP"
src="images/nav_new_sitemap.gif" width="70" height="26" border="0"></a></td>
</noscript>
<td width="70"><img src="images/clear.gif" alt="" width="70" height="5"
border="0"></td>
<td width="14"><img src="images/clear.gif" alt="" width="14"
height="1"></td>
<td width="2"><img src="images/clear.gif" alt="" width="2"
height="1"></td>
<td background="images/angle.gif" width="100%" bgcolor="#FFFFFF"><img
src="images/clear.gif" alt="" width="1" height="1"></td>
</tr>
<tr height="4" bgcolor="#CCCCCC">
<td colspan="8"><img src="images/clear.gif" alt="" width="92"
height="4"></td>
<td width="25"><img src="images/clear.gif" alt="" width="25"
height="4"></td>
<td><img src="images/clear.gif" alt="" width="1" height="4"></td>
<td width="100%" bgcolor="#FFFFFF"
background="images/angle_bottom.gif"><img src="images/clear.gif" alt=""
width="1" height="4"></td>
</tr>
</table>
</td>
</tr>
</table>
<!-- end top navigation -->
<!---- global table ------------------------->
<table cellpadding="0" cellspacing="0" border="0" width="558">
<tr>
<!-------------- left column
---------------------------------------------------->
<td valign="top" width="146" bgcolor="#CCCCCC">
<!---- highlights ------------------------->
<img src="images/topleft_whatsnew.gif" alt="What's New" border="0"
width="146" height="18"><br>
<table cellpadding="0" cellspacing="0" border="0" width="146">
<tr>
<td><img src="images/clear.gif" alt="" border="0" width="6" height="1"></td>
<td><table cellpadding="0" cellspacing="0" border="0" width="134">
<tr>
<td><img src="images/clear.gif" alt="" border="0" width="1"
height="10"></td></tr>
<!--ignore_perlfect_search-->
<!-- begin highlights -->
<tr><td class="leftcol"><a href="pr-20030825.html">Counterpane Delivers
Industry's Most Comprehensive Managed Security Services</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<tr><td class="leftcol"><a href="alerts.html">Security Alerts: Nachi Worm, New
SoBig Variant</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<tr><td class="leftcol"><a href="pr-20030813.html">Paul Stich Assumes Role of
President and CEO</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<tr><td class="leftcol"><a href="pr-20030715.html">Counterpane Announces Record
Second Quarter Results</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<tr><td class="leftcol"><a href="pr-20030625.html">Bruce Schneier Testifies at
Hearing of Homeland Security Subcommittee</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<tr><td class="leftcol"><a href="pr-sclifetime.html">Secure Computing Magazine
Honors Bruce Schneier with Lifetime Achievement Award</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<tr><td class="leftcol"><a href="pr-hs.html">Counterpane Strengthens Executive
Team with the Additions of Doug Howard and Kevin Senator</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
<!-- end highlights -->
<!--/ignore_perlfect_search-->
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="14"></td></tr>
</table>
</td>
</tr>
</table>
<!---- search form ------------------------->
<table cellpadding="0" cellspacing="0" border="0" width="146">
<tr><td colspan=2><img src="images/dottedline.gif" alt="" border="0"
width="146" height="1"></td></tr>
<tr><td colspan=2><img src="images/search_header.gif" alt="Search" border="0"
width=38 height=16 hspace="5"></td></tr>
<tr><td colspan=2><img src="images/dottedline.gif" alt="" border="0"
width="146" height="1"></td></tr>
<tr><td colspan=2><img src="images/clear.gif" alt="" border="0" width="1"
height="10"></td></tr>
<tr valign=middle><form name="searchForm" action="/search/search.pl"><td
align=left class="black-text" valign=top>
<!-- conditional sizing of search field, based on browser -->
<script language="JavaScript" type="text/javascript">
<!--
if(ns4 && !mac) {document.writeln('<input type="text" class="black-text"
size="8" name="q">');}
else if (ns4 && mac) {document.writeln('<input type="text" size="11"
class="black-text" name="q" onFocus="scrollTo(0,0)">');}
else if (ie4 && mac) {document.writeln('<input type="text" size="15"
name="q">');}
else {document.writeln('<input type="text" size="16" class="black-text"
name="q">');}
//-->
</script>
<noscript><input type="text" size="8" class="black-text"
name="q"></noscript>
</td><td><input WIDTH=24 HEIGHT=15 type="image" name="q"
src="images/search_button2.gif" alt="GO" hspace=2
border="0"></td></form></tr></table>
<!------- end of left column------------------->
</td>
<!---spacer----><td width="8"><img src="images/clear.gif" alt="" border="0"
width="8" height="1"><br></td>
<!-------------- middle column
------------------------------------------------------->
<td valign="top" width="404">
<table cellpadding="0" cellspacing="0" border="0" width="404">
<tr>
<td><img src="images/header_crypto.gif" alt="Crypto-Gram Newsletter"
border="0" width=199 height=14></td>
</tr>
<tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0"
width="404" height="1"></td></tr>
</table>
<table cellpadding="0" cellspacing="0" border="0" width="404">
<tr>
<td valign="bottom" align="left"> <!---- title ------------------------->
<table cellpadding="0" cellspacing="0" border="0" width="403">
<tr>
<td width="393" align="left" valign="top">
<p><img src="images/clear.gif" alt="" border="0" width="1"
height="10"></p>
<table width="393" border="0" cellspacing="0" cellpadding="4">
<TR><TD colspan=2>
<P class="black-text">Crypto-Gram is a <STRONG>free</STRONG> monthly e-mail
newsletter on computer security and cryptography from
<a href="schneier.html">Bruce Schneier</a>
(author of <a href="sandl.html">Secrets and Lies</a> and <a
href="applied.html">Applied Cryptography</a>, inventor of <a
href="blowfish.html">Blowfish</a>
and <a href="twofish.html">Twofish</a>,
CTO and founder of <a href="/">Counterpane Internet Security, Inc.</a>,
general <a href="pitfalls.html">crypto pundit</a>
and occasional
<a href="whycrypto.html">crypto curmudgeon</a>).
<P class="black-text"><STRONG class="black-bold-text">Subscriptions</STRONG>
<BR>To subscribe to the list, send e-mail to <a
href="mailto:crypto-gram-subscribe@xxxxxxxxxxxxxxxxx";>our subscription
address</a> from the address you wish to subscribe. You will receive a
confirmation message; reply to that message to finalize your subscription.
<P class="black-text"><a href="http://www.counterpane.com/unsubform.html";>More
details on subscribing and unsubscribing</a>
<P class="black-text">Our <a href="#privacy">privacy statement</a> is below.
<P class="black-text"><STRONG class="black-bold-text">Issues</STRONG>
</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0308.html">15 Aug 2003</a></TH>
<TD class="black-text">Beyond Fear, flying on someone else's plane ticket,
hidden text in computer documents</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0307.html">15 Jul 2003</a></TH>
<TD class="black-text">How to fight, more e-mail filtering idiocy, Password
Safe, crying wolf</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0306.html">15 Jun 2003</a></TH>
<TD class="black-text">Cyber-terrorism, self-destructing DVDs, attacking
virtual machines, auditable tasers</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0305.html">15 May 2003</a></TH>
<TD class="black-text">Encryption and wiretapping, receipts, unique e-mail
addresses and spam</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0304.html">15 Apr 2003</a></TH>
<TD class="black-text">Postal denial-of-service, baseball, NCIC database
accuracy</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0303.html">15 Mar 2003</a></TH>
<TD class="black-text">Practical Cryptography, SSL flaw, SSL patent case,
woodland ants</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0302.html">15 Feb 2003</a></TH>
<TD class="black-text">Locks and full disclosure, SQL Slammer, importance of
authentication</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0301.html">15 Jan 2003</a></TH>
<TD class="black-text">Militaries and cyber-war, cichlid fish, RMAC
authentication mode</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0212.html">15 Dec 2002</a></TH>
<TD class="black-text">Counterattack, Department of Homeland Security, Dan
Cooper, crime</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0211.html">15 Nov 2002</a></TH>
<TD class="black-text">New book, Japanese honeybees, choose your own Doghouse
candidate</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0210.html">15 Oct 2002</a></TH>
<TD class="black-text">National Strategy to Secure Cyberspace, more on AES
cryptanalysis, one-time pads</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0209.html">15 Sep 2002</a></TH>
<TD class="black-text">Word 97 vulnerability, AES news, Reveal, The
Odyssey</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0208.html">15 Aug 2002</a></TH>
<TD class="black-text">Palladium and the TCPA, license to hack, arming airline
pilots</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0207.html">15 Jul 2002</a></TH>
<TD class="black-text">Embedded control systems and security, Perrun
virus</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0206.html">15 Jun 2002</a></TH>
<TD class="black-text">Fixing intelligence failures, more on secrecy and
security</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0205.html">15 May 2002</a></TH>
<TD class="black-text">Secrecy, security, and obscurity; fun with fingerprint
readers</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0204.html">15 Apr 2002</a></TH>
<TD class="black-text">How to think about security, liability and security, key
length</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0203.html">15 Mar 2002</a></TH>
<TD class="black-text">SNMP, IETF "Responsible Disclosure" document,
Bernstein's factoring paper</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0202.html">15 Feb 2002</a></TH>
<TD class="black-text">Judging Microsoft, Oracle's "unbreakable"
database</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0201.html">15 Jan 2002</a></TH>
<TD class="black-text">Windows UPnP vulnerability, Password Safe 2.0, AGS
Encryptions</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0112.html">15 Dec 2001</a></TH>
<TD class="black-text">National ID cards, judges punish bad security, fun with
vulnerability scanners</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0111.html">15 Nov 2001</a></TH>
<TD class="black-text">Full disclosure, GOVNET, Password Safe vulnerability,
Windows XP</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0110.html">15 Oct 2001</a></TH>
<TD class="black-text">Cyberterrorism and cyberhooliganism, war on terrorism,
SSSCA, Nimda, port 80</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0109a.html">30 Sep 2001</a></TH>
<TD class="black-text">Special issue on the Sep. 11 terrorist attacks and their
aftermath
<BR><a
href="http://zeusnews.com/index.php3?ar=stampa&cod=838&ar2=stampa&numero=999";>Italian
translation by Paolo Attivissimo</a></TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0109.html">15 Sep 2001</a></TH>
<TD class="black-text">11 September 2001, NSA's dual counter mode, Microsoft
root certificate program</TD></TR>
<TR valign=top>
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0108.html">15 Aug 2001</a></TH>
<TD class="black-text">DMCA, Code Red, copyright protection, cybercrime
treaty</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0107.html">15 Jul 2001</a></TH>
<TD class="black-text">Phone hacking: the next generation, monitoring
first</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0106.html">15 Jun 2001</a></TH>
<TD class="black-text">Honeypots and Honeynet, Invicta Networks, DDOS attacks
on grc.com</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0105.html">15 May 2001</a></TH>
<TD class="black-text">Military history, digital copy prevention, security
standards, safe personal computing</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0104.html">15 Apr 2001</a></TH>
<TD class="black-text">Advantages of defense, CSI computer crime survey, fake
Microsoft certificates</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0103.html">15 Mar 2001</a></TH>
<TD class="black-text">The security patch treadmill, insurance, death of IDS,
802.11 security</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0102.html">15 Feb 2001</a></TH>
<TD class="black-text">CPRM, an intentional backdoor, e-mail filter idiocy, air
gaps, internet voting</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0101.html">15 Jan 2001</a></TH>
<TD class="black-text">A cyber UL?, SafeMessage, social engineering, code
signing in Windows</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0012.html">15 Dec 2000</a></TH>
<TD class="black-text">Voting and technology, digital safe-deposit boxes, new
bank privacy regs</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0011.html">15 Nov 2000</a></TH>
<TD class="black-text">Digital signatures, SDMI hacking challenge, Microsoft
hack</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0010.html">15 Oct 2000</a></TH>
<TD class="black-text">Semantic attacks, cybercrime treaty, NSA on security,
AES announced</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0009.html">15 Sep 2000</a></TH>
<TD class="black-text">Full disclosure, Carnivore, FBI and the Olympics,
Facemail, PGP vulnerability</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0008.html">15 Aug 2000</a></TH>
<TD class="black-text">Secrets and Lies, "Crime in Cyberspace"
convention, Authentica, Bluetooth</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0007.html">15 Jul 2000</a></TH>
<TD class="black-text">Full disclosure and the CIA, presidential password,
lockmaking, Unicode</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0006.html">15 Jun 2000</a></TH>
<TD class="black-text">SOAP, Java and viruses, DES, Infraworks</TD></TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0005.html">15 May 2000</a></TH>
<TD class="black-text">Microsoft vs. Slashdot, Cybercrime treaty, Trusted
client software, ILOVEYOU</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0004.html">15 Apr 2000</a></TH>
<TD class="black-text">AES conference, French banking card hack, Microsoft
Active Setup, UCITA</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0003.html">15 Mar 2000</a></TH>
<TD class="black-text">Kerberos and Win2K, software burglary tools, UCITA,
software complexity</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0002.html">15 Feb 2000</a></TH>
<TD class="black-text">Distributed denial-of-service, Chinese crypto regs,
publicizing vulnerabilities</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-0001.html">15 Jan 2000</a></TH>
<TD class="black-text">Publicity attacks, new encryption regs, Netscape, block
and stream ciphers</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9912.html">15 Dec 1999</a></TH>
<TD class="black-text">Security as process, ECHELON, export regulations draft,
GSM encryption</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9911.html">15 Nov 1999</a></TH>
<TD class="black-text">Why computers are insecure, DVD encryption, Win CE,
Elliptic Curves</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9910.html">15 Oct 1999</a></TH>
<TD class="black-text">Becoming a cryptographer, export rules, AMD, PKI
slogans, key length</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9909.html">15 Sep 1999</a></TH>
<TD class="black-text">Open source, NSAKEY, CESA, E*Trade, factoring RSA</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9908.html">15 Aug 1999</a></TH>
<TD class="black-text">Back Orifice 2000, AES news, HPUX, web-based encrypted
mail</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9907.html">15 Jul 1999</a></TH>
<TD class="black-text">Future of crypto-hacking, bungled SSL, reader
comments</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9906.html">15 Jun 1999</a></TH>
<TD class="black-text">E-mail viruses, hacking archives, international
encryption policy</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9905.html">15 May 1999</a></TH>
<TD class="black-text">Internationalization of cryptography, export rules,
TWINKLE</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9904.html">15 Apr 1999</a></TH>
<TD class="black-text">The importance of not being different, smart card
threats, attacking certificates with viruses</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9903.html">15 Mar 1999</a></TH>
<TD class="black-text">Security hole in IE/Outlook and Office, AES news,
RSA-140 factored</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9902.html">15 Feb 1999</a></TH>
<TD class="black-text">Snake oil, NSA and crypto export, WinXFiles, back doors,
Intel's processor ID</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9901.html">15 Jan 1999</a></TH>
<TD class="black-text">1998 year-in-review, clueless agents, Cayley-Purser</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9812.html">15 Dec 1998</a></TH>
<TD class="black-text">Cracking contests, recognizing plaintext, zip disks,
Commerce Dept. committee</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9811.html">15 Nov 1998</a></TH>
<TD class="black-text">Electronic commerce, micro locks, copy protection, more
on steganography</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9810.html">15 Oct 1998</a></TH>
<TD class="black-text">Steganography, TriStrata, Rapid Remote, memo to amateur
cipher designers</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9809.html">15 Sep 1998</a></TH>
<TD class="black-text">Cramer-Shoup, impossible cryptanalysis, street
performer, Private Doorbell</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9808.html">15 Aug 1998</a></TH>
<TD><P class="black-text">Hardware DES cracker, KEA, chosen protocol attack,
biometrics</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9807.html">15 Jul 1998</a></TH>
<TD class="black-text">Breaking RSA, declassifying Skipjack, secure audit logs,
WIPO</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9806.html">15 Jun 1998</a></TH>
<TD class="black-text">Side channel attacks, risks of key escrow, pseudo-random
number generators</TD>
</TR>
<TR class="black-text">
<TH align=left valign=top class="black-bold-text"><a
href="crypto-gram-9805.html">15 May 1998</a></TH>
<TD class="black-text">AES, secret story of non-secret encryption, conditional
purchase orders</TD>
</TR>
<TR><TD colspan=2>
<P class="black-text"><BR><STRONG class="black-bold-text"><a
name="trans">Translations</a></STRONG>
<BR>Kriptópolis translates Crypto-Gram into <a
href="http://www.kriptopolis.com/index.php?id=C0_12_1";>Spanish</a>. <a
href="http://www.communicationvalley.it/crypto-gram.html";>Italian</a>
translations, by Communication Valley S.P.A., are available on the web or as a
mailing list. Holger Hasselbach has translated several issues of Crypto-Gram
into <a href="http://www.galad.com/extras/cg/cg.htm";>German</a>, and Fernandes
Gilbert has translated some issues into <a
href="http://perso.wanadoo.fr/gilbert.fernandes/cryptogram.html";>French</a>.
<P class="black-text"><STRONG class="black-bold-text"><a name="privacy">Privacy
Statement</a></STRONG>
<BR>Counterpane Internet Security, Inc. and Counterpane Labs will not use the
Crypto-Gram mailing list for any other purpose than e-mailing Crypto-Gram. We
will not use the mailing list for company marketing, nor will we sell the list
to any third parties.
</TD></TR>
</TABLE>
</td>
<td width="10"> </td>
</tr>
<!---- articles ------------------------->
</table>
<img src="images/clear.gif" alt="" border="0" width="1" height="21"><br>
<a href="#" onclick="scrollTo(0,0)"><img
src="images/back_to_top.gif" alt="TOP" border="0" width="27"
height="9"></a></td>
<td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0" width="1"
height="1"></td>
</tr>
</table>
<table cellpadding="0" cellspacing="0" border="0" width="404">
<tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0"
width="404" height="1"></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="17"></td></tr>
<tr><td bgcolor="#cccccc"><img src="images/clear.gif" alt="" border="0"
width="404" height="1"></td></tr>
<tr><td class="black-text">Copyright Counterpane Internet Security, Inc.,
2003<BR>
<a href="permiss.html">Reprint Permission</a></td></tr>
<tr><td><img src="images/clear.gif" alt="" border="0" width="1"
height="50"></td></tr>
</table>
<!-------end of middle column------------------->
</td>
</tr>
</table>
<!-------end of global table------------------->
<!-- dropdown menus -->
<div id="menuContact" onMouseOver="menuOn('menuContact')"
onMouseOut="overChecker('menuContact')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuContact');}
function onMouseOut() { overChecker('menuContact')}
</script>
<a href="cis-contact.html"
onmouseover="rollOn('contactnav_5_contact','menuContact')"
onmouseout="rollOff('contactnav_5_contact','menuContact')"><img
src="images/contactnav_5_contact.gif" alt="Contact" width=179 height=22
border="0" name="contactnav_5_contact"></a></div>
<div id="menuSite" onMouseOver="menuOn('menuSite')"
onMouseOut="overChecker('menuSite')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuSite');}
function onMouseOut() { overChecker('menuSite')}
</script>
<a href="index.html" onmouseover="rollOn('sitenav_r_home','menuSite')"
onmouseout="rollOff('sitenav_r_home','menuSite')"><img
src="images/sitenav_r_home.gif" alt="Home" width=179 height=18 border="0"
name="sitenav_r_home"></a><br>
<a href="sitemap.html" onmouseover="rollOn('sitenav_r_sitemap','menuSite')"
onmouseout="rollOff('sitenav_r_sitemap','menuSite')"><img
src="images/sitenav_r_sitemap.gif" alt="Site Map" width=179 height=18
border="0" name="sitenav_r_sitemap"></a><br>
<a href="cissearch.html" onmouseover="rollOn('sitenav_r_search','menuSite')"
onmouseout="rollOff('sitenav_r_search','menuSite')"><img
src="images/sitenav_r_search.gif" alt="Search" width=179 height=18 border="0"
name="sitenav_r_search"></a><br>
<a href="https://www.counterpane.com/ccrp/";
onmouseover="rollOn('sitenav_r_var','menuSite')"
onmouseout="rollOff('sitenav_r_var','menuSite')"><img
src="images/sitenav_r_var.gif" alt="VAR-only site" width=179 height=22
border="0" name="sitenav_r_var"></a></div>
<div id="menuLibrary" onMouseOver="menuOn('menuLibrary')"
onMouseOut="overChecker('menuLibrary')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuLibrary');}
function onMouseOut() { overChecker('menuLibrary')}
</script>
<a href="literature.html"
onmouseover="rollOn('librarynav_2_literature','menuLibrary')"
onmouseout="rollOff('librarynav_2_literature','menuLibrary')"><img
src="images/librarynav_2_literature.gif" alt="Counterpane Literature" width=179
height=18 border="0" name="librarynav_2_literature"></a><br>
<a href="log-analysis.html"
onmouseover="rollOn('librarynav_2_log','menuLibrary')"
onmouseout="rollOff('librarynav_2_log','menuLibrary')"><img
src="images/librarynav_2_log.gif" alt="Log Analysis Resources" width=179
height=18 border="0" name="librarynav_2_log"></a><br>
<a href="publish.html"
onmouseover="rollOn('librarynav_2_labs','menuLibrary')"
onmouseout="rollOff('librarynav_2_labs','menuLibrary')"><img
src="images/librarynav_2_labs.gif" alt="Counterpane Labs Publications"
width=179 height=18 border="0" name="librarynav_2_labs"></a><br>
<a href="crypto-gram.html"
onmouseover="rollOn('librarynav_r_crypto','menuLibrary')"
onmouseout="rollOff('librarynav_r_crypto','menuLibrary')"><img
src="images/librarynav_r_crypto.gif" alt="Crypto-Gram" width=179 height=18
border="0" name="librarynav_r_crypto"></a><br>
<a href="book-beyondfear.html"
onmouseover="rollOn('librarynav_4_beyond_fear','menuLibrary')"
onmouseout="rollOff('librarynav_4_beyond_fear','menuLibrary')"><img
src="images/librarynav_4_beyond_fear.gif" alt="Beyond Fear" width=179 height=18
border="0" name="librarynav_4_beyond_fear"></a><br>
<a href="sandl.html" onmouseover="rollOn('librarynav_r_sandl','menuLibrary')"
onmouseout="rollOff('librarynav_r_sandl','menuLibrary')"><img
src="images/librarynav_r_sandl.gif" alt="Secrets and Lies" width=179 height=22
border="0" name="librarynav_r_sandl"></a>
</div>
<div id="menuNews" onMouseOver="menuOn('menuNews')"
onMouseOut="overChecker('menuNews')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuNews');}
function onMouseOut() { overChecker('menuNews')}
</script>
<a href="cisnews.html" onmouseover="rollOn('newsnav_2_clip','menuNews')"
onmouseout="rollOff('newsnav_2_clip','menuNews')"><img
src="images/newsnav_2_clip.gif" alt="Press Clippings" width=179 height=18
border="0" name="newsnav_2_clip"></a><br>
<a href="pressrel.html" onmouseover="rollOn('newsnav_2_release','menuNews')"
onmouseout="rollOff('newsnav_2_release','menuNews')"><img
src="images/newsnav_2_release.gif" alt="Press Releases" width=179 height=18
border="0" name="newsnav_2_release"></a><br>
<a href="analyst.html" onmouseover="rollOn('newsnav_2_analyst','menuNews')"
onmouseout="rollOff('newsnav_2_analyst','menuNews')"><img
src="images/newsnav_2_analyst.gif" alt="Analyst Comments" width=179 height=18
border="0" name="newsnav_2_analyst"></a><br>
<a href="alerts.html" onmouseover="rollOn('newsnav_2_alerts','menuNews')"
onmouseout="rollOff('newsnav_2_alerts','menuNews')"><img
src="images/newsnav_2_alerts.gif" alt="Alerts" width=179 height=18 border="0"
name="newsnav_2_alerts"></a><br>
<a href="conf.html" onmouseover="rollOn('newsnav_2_calendar','menuNews')"
onmouseout="rollOff('newsnav_2_calendar','menuNews')"><img
src="images/newsnav_2_calendar.gif" alt="Calendar" width=179 height=22
border="0" name="newsnav_2_calendar"></a></div>
<div id="menuCustomers" onMouseOver="menuOn('menuCustomers')"
onMouseOut="overChecker('menuCustomers')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuCustomers');}
function onMouseOut() { overChecker('menuCustomers')}
</script>
<a href="customers.html"
onmouseover="rollOn('customersnav_5_customers','menuCustomers')"
onmouseout="rollOff('newsnav_5_customers','menuCustomers')"><img
src="images/customersnav_5_customers.gif" alt="Customers" width=179 height=22
border="0" name="customersnav_5_customers"></a></div>
<div id="menuServices" onMouseOver="menuOn('menuServices')"
onMouseOut="overChecker('menuServices')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuServices');}
function onMouseOut() { overChecker('menuServices')}
</script>
<a href="overview.html"
onmouseover="rollOn('servicesnav_4_suite','menuServices')"
onmouseout="rollOff('servicesnav_4_suite','menuServices')"><img
src="images/servicesnav_4_suite.gif" alt="Enterprise Protection Suite"
width=179 height=18 border="0" name="servicesnav_4_suite"></a><br>
<a href="services-msm.html"
onmouseover="rollOn('servicesnav_4_msm','menuServices')"
onmouseout="rollOff('servicesnav_4_msm','menuServices')"><img
src="images/servicesnav_4_msm.gif" alt="Managed Security Monitoring" width=179
height=18 border="0" name="servicesnav_4_msm"></a><br>
<a href="response.html"
onmouseover="rollOn('servicesnav_4_response','menuServices')"
onmouseout="rollOff('servicesnav_4_response','menuServices')"><img
src="images/servicesnav_4_response.gif" alt="Active Response" width=179
height=18 border="0" name="servicesnav_4_response"></a><br>
<a href="device.html"
onmouseover="rollOn('servicesnav_4_device','menuServices')"
onmouseout="rollOff('servicesnav_4_device','menuServices')"><img
src="images/servicesnav_4_device.gif" alt="Device Management" width=179
height=18 border="0" name="servicesnav_4_device"></a><br>
<a href="scanning.html"
onmouseover="rollOn('servicesnav_4_scanning','menuServices')"
onmouseout="rollOff('servicesnav_4_scanning','menuServices')"><img
src="images/servicesnav_4_scanning.gif" alt="Managed Vulnerability Scanning"
width=179 height=18 border="0" name="servicesnav_4_scanning"></a><br>
<a href="consulting.html"
onmouseover="rollOn('servicesnav_5_consulting','menuServices')"
onmouseout="rollOff('servicesnav_5_consulting','menuServices')"><img
src="images/servicesnav_5_consulting.gif" alt="Security Consulting" width=179
height=18 border="0" name="servicesnav_5_consulting"></a><br>
<a href="labs.html" onmouseover="rollOn('servicesnav_5_labs','menuServices')"
onmouseout="rollOff('servicesnav_5_labs','menuServices')"><img
src="images/servicesnav_5_labs.gif" alt="Counterpane Labs" width=179 height=22
border="0" name="servicesnav_5_labs"></a></div>
<div id="menuCompany" onMouseOver="menuOn('menuCompany')"
onMouseOut="overChecker('menuCompany')">
<script language="JavaScript">
function onMouseOver() { menuOn('menuCompany');}
function onMouseOut() { overChecker('menuCompany')}
</script>
<a href="background.html"
onmouseover="rollOn('companynav_4_background','menuCompany')"
onmouseout="rollOff('companynav_4_background','menuCompany')"><img
src="images/companynav_4_background.gif" alt="Background" width=179 height=18
border="0" name="companynav_4_background"></a><br>
<a href="team.html" onmouseover="rollOn('companynav_5_team','menuCompany')"
onmouseout="rollOff('companynav_5_team','menuCompany')"><img
src="images/companynav_5_team.gif" alt="Our Team" width=179 height=18
border="0" name="companynav_5_team"></a><br>
<a href="jobs.html"
onmouseover="rollOn('companynav_4_careers','menuCompany')"
onmouseout="rollOff('companynav_4_careers','menuCompany')"><img
src="images/companynav_4_careers.gif" alt="Careers" width=179 height=18
border="0" name="companynav_4_careers"></a><br>
<a href="investors.html"
onmouseover="rollOn('companynav_4_investors','menuCompany')"
onmouseout="rollOff('companynav_4_investors','menuCompany')"><img
src="images/companynav_4_investors.gif" alt="Investors" width=179 height=18
border="0" name="companynav_4_investors"></a><br>
<a href="partners.html"
onmouseover="rollOn('companynav_5_partners','menuCompany')"
onmouseout="rollOff('companynav_5_partners','menuCompany')"><img
src="images/companynav_5_partners.gif" alt="Partners" width=179 height=22
border="0" name="companynav_5_partners"></a></div>
<!-- end of dropdown menus -->
</body>
</html>