Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | vbscript.dll regular expression object (RegExp) memory leak |
|---|---|
| Date: | Sun, 27 Feb 2005 05:51:41 -0800 |
Hello,
The following vbscript, which uses the RegExp object,
causes memory leak (tested under Windows XP SP2 with
Script Engine V5.6); when you run it, locate the
associated wscript.exe or cscript.exe process in the
Windows task manager, then click "OK" in the "Start"
message box, and see how the "Mem Usage" value grows
in the task manager.
Dim PatternStr
Dim oRegExp
Dim oMatches
PatternStrBuggy = "^(?:\<([0-9]+)\>)?(?:([A-Za-z]+)
)?(?:([\d ]\d) )?(?:(\d+)
)?(?:([0-9]+:[0-9]+:[0-9]+(?:\.[0-9]+)?) )?(?:([^ :]+)
)?((?:(?:([^ \[\:]+)(?:\[([0-9]+)\])?:)? )?(.*))"
strng = "c"
Set oRegExp = New RegExp
oRegExp.Global = true
oRegExp.Multiline = true
oRegExp.Pattern = PatternStrBuggy
On Error Resume Next
MsgBox "start"
For i=1 to 10000000
Set oMatches = oRegExp.Execute(strng)
Next
MsgBox "stop"
*** end of mail ***
__________________________________
Do you Yahoo!?
Yahoo! Mail - Easier than ever with enhanced search. Learn more.
http://info.mail.yahoo.com/mail_250
--
NTBugtraq Editor's Note:
Most viruses these days use spoofed email addresses. As such, using an
Anti-Virus product which automatically notifies the perceived sender of a
message it believes is infected may well cause more harm than good. Someone who
did not actually send you a virus may receive the notification and scramble
their support staff to find an infection which never existed in the first
place. Suggest such notifications be disabled by whomever is responsible for
your AV, or at least that the idea is considered.
--
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Change to Object Caching in IE with XP SP2 applied, Don Tuer |
|---|---|
| Next by Date: | WASC-Articles: 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' By Amit Klein, robert |
| Previous by Thread: | Re: Bug submission, Discini, Sonny |
| Next by Thread: | WASC-Articles: 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' By Amit Klein, robert |
| Indexes: | [Date] [Thread] [Top] [All Lists] |