API tools faq
paste
Advertisement
f13-labs

test - cve-2014-1776

f13-labs
Apr 30th, 2014
1,458
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 21.25 KB | None | 0 0
raw download clone embed print report
  1. Microsoft (R) Windows Debugger Version 6.2.9200.16384 X86
  2. Copyright (c) Microsoft Corporation. All rights reserved.
  3.  
  4. *** wait with pending attach
  5. Symbol search path is: SRV*C:\symbols*http://msdl.microsoft.com/download/symbols
  6. Executable search path is:
  7. ModLoad: 002b0000 00356000 C:\Program Files\Internet Explorer\iexplore.exe
  8. ModLoad: 76f80000 770bc000 C:\Windows\SYSTEM32\ntdll.dll
  9. ModLoad: 70020000 70080000 C:\Windows\system32\verifier.dll
  10. ModLoad: 75760000 75834000 C:\Windows\system32\kernel32.dll
  11. ModLoad: 75260000 752aa000 C:\Windows\system32\KERNELBASE.dll
  12. ModLoad: 75a80000 75b20000 C:\Windows\system32\ADVAPI32.dll
  13. ModLoad: 759b0000 75a5c000 C:\Windows\system32\msvcrt.dll
  14. ModLoad: 75d20000 75d39000 C:\Windows\SYSTEM32\sechost.dll
  15. ModLoad: 75540000 755e1000 C:\Windows\system32\RPCRT4.dll
  16. ModLoad: 770e0000 771a9000 C:\Windows\system32\USER32.dll
  17. ModLoad: 75cc0000 75d0e000 C:\Windows\system32\GDI32.dll
  18. ModLoad: 770c0000 770ca000 C:\Windows\system32\LPK.dll
  19. ModLoad: 756c0000 7575d000 C:\Windows\system32\USP10.dll
  20. ModLoad: 753d0000 75427000 C:\Windows\system32\SHLWAPI.dll
  21. ModLoad: 762a0000 76ee9000 C:\Windows\system32\SHELL32.dll
  22. ModLoad: 75850000 759ac000 C:\Windows\system32\ole32.dll
  23. ModLoad: 75e40000 76039000 C:\Windows\system32\iertutil.dll
  24. ModLoad: 760d0000 76205000 C:\Windows\system32\urlmon.dll
  25. ModLoad: 76040000 760cf000 C:\Windows\system32\OLEAUT32.dll
  26. ModLoad: 752b0000 753cc000 C:\Windows\system32\CRYPT32.dll
  27. ModLoad: 75140000 7514c000 C:\Windows\system32\MSASN1.dll
  28. ModLoad: 75a60000 75a7f000 C:\Windows\system32\IMM32.DLL
  29. ModLoad: 755f0000 756bc000 C:\Windows\system32\MSCTF.dll
  30. ModLoad: 6e8d0000 6f34c000 C:\Windows\system32\IEFRAME.dll
  31. ModLoad: 75840000 75845000 C:\Windows\system32\PSAPI.DLL
  32. ModLoad: 737b0000 737ec000 C:\Windows\system32\OLEACC.dll
  33. ModLoad: 74060000 741fe000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll
  34. ModLoad: 754c0000 7553b000 C:\Windows\system32\comdlg32.dll
  35. ModLoad: 6f780000 6f7b5000 C:\Program Files\Internet Explorer\IEShims.dll
  36. ModLoad: 75020000 7502c000 C:\Windows\system32\CRYPTBASE.dll
  37. ModLoad: 73ee0000 73f20000 C:\Windows\system32\uxtheme.dll
  38. ModLoad: 750c0000 750ce000 C:\Windows\system32\RpcRtRemote.dll
  39. ModLoad: 73bb0000 73bc3000 C:\Windows\system32\dwmapi.dll
  40. ModLoad: 76ef0000 76f73000 C:\Windows\system32\CLBCatQ.DLL
  41. ModLoad: 73f20000 74015000 C:\Windows\system32\propsys.dll
  42. ModLoad: 73610000 73631000 C:\Windows\system32\ntmarta.dll
  43. ModLoad: 76210000 76255000 C:\Windows\system32\WLDAP32.dll
  44. ModLoad: 750d0000 750db000 C:\Windows\system32\profapi.dll
  45. ModLoad: 74c20000 74c36000 C:\Windows\system32\CRYPTSP.dll
  46. ModLoad: 748f0000 7492b000 C:\Windows\system32\rsaenh.dll
  47. ModLoad: 75b20000 75cbd000 C:\Windows\system32\SETUPAPI.dll
  48. ModLoad: 751a0000 751c7000 C:\Windows\system32\CFGMGR32.dll
  49. ModLoad: 75150000 75162000 C:\Windows\system32\DEVOBJ.dll
  50. ModLoad: 6b7a0000 6b7cb000 C:\Program Files\Internet Explorer\ieproxy.dll
  51. ModLoad: 75d40000 75e34000 C:\Windows\system32\WININET.dll
  52. ModLoad: 770d0000 770d3000 C:\Windows\system32\Normaliz.dll
  53. ModLoad: 74f80000 74f9a000 C:\Windows\system32\SspiCli.dll
  54. ModLoad: 76260000 76295000 C:\Windows\system32\ws2_32.DLL
  55. ModLoad: 75d10000 75d16000 C:\Windows\system32\NSI.dll
  56. ModLoad: 749d0000 74a14000 C:\Windows\system32\dnsapi.DLL
  57. ModLoad: 71f70000 71f8c000 C:\Windows\system32\iphlpapi.DLL
  58. ModLoad: 71f60000 71f67000 C:\Windows\system32\WINNSI.DLL
  59. ModLoad: 74fd0000 7501b000 C:\Windows\system32\apphelp.dll
  60. ModLoad: 745d0000 745d9000 C:\Windows\system32\VERSION.dll
  61. ModLoad: 70f90000 70fe2000 C:\Windows\system32\RASAPI32.dll
  62. ModLoad: 71fc0000 71fd5000 C:\Windows\system32\rasman.dll
  63. ModLoad: 737f0000 737fd000 C:\Windows\system32\rtutils.dll
  64. ModLoad: 73640000 73646000 C:\Windows\system32\sensapi.dll
  65. ModLoad: 74be0000 74c1c000 C:\Windows\system32\mswsock.dll
  66. ModLoad: 74660000 74665000 C:\Windows\System32\wshtcpip.dll
  67. ModLoad: 733e0000 733f0000 C:\Windows\system32\NLAapi.dll
  68. ModLoad: 73a70000 73a76000 C:\Windows\system32\rasadhlp.dll
  69. ModLoad: 6be60000 6be8e000 C:\Windows\system32\MLANG.dll
  70. ModLoad: 71cb0000 71cb8000 C:\Windows\System32\winrnr.dll
  71. ModLoad: 6e530000 6e540000 C:\Windows\system32\napinsp.dll
  72. ModLoad: 6db00000 6db12000 C:\Windows\system32\pnrpnsp.dll
  73. ModLoad: 6e4d0000 6e4dd000 C:\Windows\system32\wshbth.dll
  74. ModLoad: 74b00000 74b06000 C:\Windows\System32\wship6.dll
  75. ModLoad: 661c0000 663dd000 C:\PROGRA~1\MICROS~1\Office12\GR469A~1.DLL
  76. ModLoad: 68ef0000 68fe1000 C:\PROGRA~1\MICROS~1\Office12\GrooveUtil.DLL
  77. ModLoad: 71590000 7162b000 C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4927_none_d08a205e442db5b5\MSVCR80.dll
  78. ModLoad: 68ff0000 68ff7000 C:\PROGRA~1\MICROS~1\Office12\GrooveNew.DLL
  79. ModLoad: 7c630000 7c64b000 C:\Windows\WinSxS\x86_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.42_none_dc990e4797f81af1\ATL80.DLL
  80. ModLoad: 751d0000 75254000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7600.16385_none_ebf82fc36c758ad5\COMCTL32.dll
  81. ModLoad: 71580000 71585000 C:\Windows\system32\MSImg32.dll
  82. ModLoad: 71e30000 71e68000 C:\Windows\System32\fwpuclnt.dll
  83. ModLoad: 75030000 7508f000 C:\Windows\system32\SXS.DLL
  84. ModLoad: 74730000 74747000 C:\Windows\system32\USERENV.dll
  85. ModLoad: 75170000 7519d000 C:\Windows\system32\wintrust.dll
  86. ModLoad: 74960000 74999000 C:\Windows\system32\schannel.DLL
  87. ModLoad: 747f0000 747f8000 C:\Windows\system32\credssp.dll
  88. ModLoad: 74f60000 74f68000 C:\Windows\system32\secur32.dll
  89. ModLoad: 74c80000 74cb8000 C:\Windows\system32\ncrypt.dll
  90. ModLoad: 74c60000 74c77000 C:\Windows\system32\bcrypt.dll
  91. ModLoad: 74830000 7486d000 C:\Windows\system32\bcryptprimitives.dll
  92. ModLoad: 74710000 74726000 C:\Windows\system32\GPAPI.dll
  93. ModLoad: 73180000 7319c000 C:\Windows\system32\cryptnet.dll
  94. ModLoad: 6be10000 6be25000 C:\Windows\system32\Cabinet.dll
  95. ModLoad: 748d0000 748de000 C:\Windows\system32\DEVRTL.dll
  96. ModLoad: 6a280000 6a832000 C:\Windows\System32\mshtml.dll
  97. ModLoad: 70f20000 70f4a000 C:\Windows\System32\msls31.dll
  98. ModLoad: 73110000 7311b000 C:\Windows\system32\msimtf.dll
  99. ModLoad: 6f430000 6f4e2000 C:\Windows\System32\jscript.dll
  100. ModLoad: 6f800000 6f830000 C:\Windows\System32\iepeers.dll
  101. ModLoad: 72cb0000 72d01000 C:\Windows\System32\WINSPOOL.DRV
  102. ModLoad: 6f740000 6f779000 C:\Windows\System32\Dxtrans.dll
  103. ModLoad: 73390000 733a4000 C:\Windows\System32\ATL.DLL
  104. ModLoad: 73170000 7317a000 C:\Windows\system32\ddrawex.dll
  105. ModLoad: 6d350000 6d437000 C:\Windows\system32\DDRAW.dll
  106. ModLoad: 73100000 73106000 C:\Windows\system32\DCIMAN32.dll
  107. ModLoad: 716b0000 716e0000 C:\Windows\system32\vm3dum.dll
  108. ModLoad: 6f3d0000 6f427000 C:\Windows\System32\Dxtmsft.dll
  109. ModLoad: 730d0000 730db000 C:\Windows\system32\ImgUtil.dll
  110. ModLoad: 730c0000 730ce000 C:\Windows\System32\pngfilt.dll
  111. ModLoad: 73b80000 73baf000 C:\Windows\system32\XmlLite.dll
  112. ModLoad: 6f930000 6f962000 C:\Windows\system32\WINMM.dll
  113. ModLoad: 73bd0000 73c09000 C:\Windows\system32\MMDevAPI.DLL
  114. ModLoad: 70680000 706b0000 C:\Windows\system32\wdmaud.drv
  115. ModLoad: 70670000 70674000 C:\Windows\system32\ksuser.dll
  116. ModLoad: 73660000 73667000 C:\Windows\system32\AVRT.dll
  117. ModLoad: 700f0000 70126000 C:\Windows\system32\AUDIOSES.DLL
  118. ModLoad: 700b0000 700b8000 C:\Windows\system32\msacm32.drv
  119. ModLoad: 70090000 700a4000 C:\Windows\system32\MSACM32.dll
  120. ModLoad: 70080000 70087000 C:\Windows\system32\midimap.dll
  121. ModLoad: 6cfc0000 6d081000 C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll
  122. ModLoad: 73d50000 73ee0000 C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll
  123. (d2c.2e4): Access violation - code c0000005 (!!! second chance !!!)
  124. eax=0d528f30 ebx=0d528f30 ecx=ed5e0d9e edx=6a3f5438 esi=0d528f30 edi=13f9efc0
  125. eip=6a3d8d1d esp=0442be2c ebp=0442be50 iopl=0 nv up ei pl zr na pe nc
  126. cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010246
  127. mshtml!CMarkup::IsConnectedToPrimaryMarkup+0x6:
  128. 6a3d8d1d 8b465c mov eax,dword ptr [esi+5Ch] ds:0023:0d528f8c=????????
  129. 0:005> !analyze -v
  130. *******************************************************************************
  131. * *
  132. * Exception Analysis *
  133. * *
  134. *******************************************************************************
  135.  
  136. *************************************************************************
  137. *** ***
  138. *** ***
  139. *** Either you specified an unqualified symbol, or your debugger ***
  140. *** doesn't have full symbol information. Unqualified symbol ***
  141. *** resolution is turned off by default. Please either specify a ***
  142. *** fully qualified symbol module!symbolname, or enable resolution ***
  143. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  144. *** enabling unqualified symbol resolution with network symbol ***
  145. *** server shares in the symbol path may cause the debugger to ***
  146. *** appear to hang for long periods of time when an incorrect ***
  147. *** symbol name is typed or the network symbol server is down. ***
  148. *** ***
  149. *** For some commands to work properly, your symbol path ***
  150. *** must point to .pdb files that have full type information. ***
  151. *** ***
  152. *** Certain .pdb files (such as the public OS symbols) do not ***
  153. *** contain the required information. Contact the group that ***
  154. *** provided you with these symbols if you need this command to ***
  155. *** work. ***
  156. *** ***
  157. *** Type referenced: ieframe!CShellBrowser2 ***
  158. *** ***
  159. *************************************************************************
  160. *************************************************************************
  161. *** ***
  162. *** ***
  163. *** Either you specified an unqualified symbol, or your debugger ***
  164. *** doesn't have full symbol information. Unqualified symbol ***
  165. *** resolution is turned off by default. Please either specify a ***
  166. *** fully qualified symbol module!symbolname, or enable resolution ***
  167. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  168. *** enabling unqualified symbol resolution with network symbol ***
  169. *** server shares in the symbol path may cause the debugger to ***
  170. *** appear to hang for long periods of time when an incorrect ***
  171. *** symbol name is typed or the network symbol server is down. ***
  172. *** ***
  173. *** For some commands to work properly, your symbol path ***
  174. *** must point to .pdb files that have full type information. ***
  175. *** ***
  176. *** Certain .pdb files (such as the public OS symbols) do not ***
  177. *** contain the required information. Contact the group that ***
  178. *** provided you with these symbols if you need this command to ***
  179. *** work. ***
  180. *** ***
  181. *** Type referenced: ieframe!_SHITEMID ***
  182. *** ***
  183. *************************************************************************
  184. *************************************************************************
  185. *** ***
  186. *** ***
  187. *** Either you specified an unqualified symbol, or your debugger ***
  188. *** doesn't have full symbol information. Unqualified symbol ***
  189. *** resolution is turned off by default. Please either specify a ***
  190. *** fully qualified symbol module!symbolname, or enable resolution ***
  191. *** of unqualified symbols by typing ".symopt- 100". Note that ***
  192. *** enabling unqualified symbol resolution with network symbol ***
  193. *** server shares in the symbol path may cause the debugger to ***
  194. *** appear to hang for long periods of time when an incorrect ***
  195. *** symbol name is typed or the network symbol server is down. ***
  196. *** ***
  197. *** For some commands to work properly, your symbol path ***
  198. *** must point to .pdb files that have full type information. ***
  199. *** ***
  200. *** Certain .pdb files (such as the public OS symbols) do not ***
  201. *** contain the required information. Contact the group that ***
  202. *** provided you with these symbols if you need this command to ***
  203. *** work. ***
  204. *** ***
  205. *** Type referenced: ieframe!URLID ***
  206. *** ***
  207. *************************************************************************
  208.  
  209. FAULTING_IP:
  210. mshtml!CMarkup::IsConnectedToPrimaryMarkup+6
  211. 6a3d8d1d 8b465c mov eax,dword ptr [esi+5Ch]
  212.  
  213. EXCEPTION_RECORD: ffffffff -- (.exr 0xffffffffffffffff)
  214. ExceptionAddress: 6a3d8d1d (mshtml!CMarkup::IsConnectedToPrimaryMarkup+0x00000006)
  215. ExceptionCode: c0000005 (Access violation)
  216. ExceptionFlags: 00000000
  217. NumberParameters: 2
  218. Parameter[0]: 00000000
  219. Parameter[1]: 0d528f8c
  220. Attempt to read from address 0d528f8c
  221.  
  222. FAULTING_THREAD: 000002e4
  223.  
  224. DEFAULT_BUCKET_ID: INVALID_POINTER_READ
  225.  
  226. PROCESS_NAME: iexplore.exe
  227.  
  228. ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  229.  
  230. EXCEPTION_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%08lx referenced memory at 0x%08lx. The memory could not be %s.
  231.  
  232. EXCEPTION_PARAMETER1: 00000000
  233.  
  234. EXCEPTION_PARAMETER2: 0d528f8c
  235.  
  236. READ_ADDRESS: 0d528f8c
  237.  
  238. FOLLOWUP_IP:
  239. mshtml!CMarkup::IsConnectedToPrimaryMarkup+6
  240. 6a3d8d1d 8b465c mov eax,dword ptr [esi+5Ch]
  241.  
  242. NTGLOBALFLAG: 2000000
  243.  
  244. APPLICATION_VERIFIER_FLAGS: 0
  245.  
  246. APP: iexplore.exe
  247.  
  248. PRIMARY_PROBLEM_CLASS: INVALID_POINTER_READ
  249.  
  250. BUGCHECK_STR: APPLICATION_FAULT_INVALID_POINTER_READ
  251.  
  252. LAST_CONTROL_TRANSFER: from 6a3d8a98 to 6a3d8d1d
  253.  
  254. STACK_TEXT:
  255. 0442be30 6a3d8a98 13f9efc0 6a43ce50 00000000 mshtml!CMarkup::IsConnectedToPrimaryMarkup+0x6
  256. 0442be50 6a3d9d57 0d528f30 00000003 0442be74 mshtml!CMarkup::OnCssChange+0x52
  257. 0442be60 6a6ca5b3 00000003 13f9efc0 6a43ce64 mshtml!CElement::OnCssChange+0x1e
  258. 0442be74 6a42bfc6 8001004c 00030080 6a43ce50 mshtml!CStyleElement::OnPropertyChange+0xfc
  259. 0442bf54 6a3a4bd1 6a43ce64 ffffffff 13f9efcc mshtml!NUMPROPPARAMS::SetNumberProperty+0x2d9
  260. 0442bf70 6a3a4ba1 0000ffff 0d2aefd8 0442bfa8 mshtml!CBase::put_BoolHelper+0x25
  261. 0442bf80 6a3a24dd 13f9efc0 0000ffff 12312fd0 mshtml!CBase::put_Bool+0x22
  262. 0442bfa8 6a4b235c 13f9efc0 12312fd0 0d2aefd8 mshtml!GS_VARIANTBOOL+0x19b
  263. 0442c01c 6a4bc75a 13f9efc0 8001004c 00000001 mshtml!CBase::ContextInvokeEx+0x5dc
  264. 0442c06c 6a2cc29b 13f9efc0 8001004c 00000001 mshtml!CElement::ContextInvokeEx+0x9d
  265. 0442c098 6a463104 13f9efc0 8001004c 00000001 mshtml!CStyleElement::VersionedInvokeEx+0x62
  266. 0442c0ec 6f43a22a 0e148fd8 8001004c 00000001 mshtml!PlainInvokeEx+0xeb
  267. 0442c128 6f43a175 1332cd10 8001004c 00000409 jscript!IDispatchExInvokeEx2+0x104
  268. 0442c164 6f43a3f6 1332cd10 00000409 00000004 jscript!IDispatchExInvokeEx+0x6a
  269. 0442c224 6f43a4a0 8001004c 00000004 00000000 jscript!InvokeDispatchEx+0x98
  270. 0442c258 6f44d8c8 1332cd10 0442c28c 0000000c jscript!VAR::InvokeByName+0x139
  271. 0442c2a0 6f439c0e 1332cd10 0000000c 00000000 jscript!VAR::InvokeDispName+0x7d
  272. 0442c434 6f445c9d 0442c44c 00000000 12844f88 jscript!CScriptRuntime::Run+0x208d
  273. 0442c51c 6f445bfb 00000000 00000000 07bf2ef0 jscript!ScrFncObj::CallWithFrameOnStack+0xce
  274. 0442c564 6f4474ac 00000000 00000000 07bf2ef0 jscript!ScrFncObj::Call+0x8d
  275. 0442c5e8 6f444ea4 12c12fa0 1332cd10 00000001 jscript!NameTbl::InvokeInternal+0x141
  276. 0442c618 6f44e3e7 1332cd10 00000000 00000001 jscript!VAR::InvokeByDispID+0x17f
  277. 0442c7b4 6f445c9d 0442c7cc 0442c910 12048f88 jscript!CScriptRuntime::Run+0x2b80
  278. 0442c89c 6f445bfb 0442c910 00000000 07bf2f50 jscript!ScrFncObj::CallWithFrameOnStack+0xce
  279. 0442c8e4 6f445e11 0442c910 00000000 07bf2f50 jscript!ScrFncObj::Call+0x8d
  280. 0442c960 6f43f3ee 12048f88 0442ed58 00000000 jscript!CSession::Execute+0x15f
  281. 0442ca48 6f43ea2e 00000000 00000001 0442cb98 jscript!NameTbl::InvokeDef+0x1b5
  282. 0442cacc 6f43a22a 12048f88 00000000 00000001 jscript!NameTbl::InvokeEx+0x12c
  283. 0442cb08 6f43a175 1332cd10 00000000 00000001 jscript!IDispatchExInvokeEx2+0x104
  284. 0442cb44 6f43f5f8 1332cd10 00000001 00000001 jscript!IDispatchExInvokeEx+0x6a
  285. 0442cbd4 6a4c19cb 0442cb98 00000004 00000001 jscript!NameTbl::InvokeEx+0x37a
  286. 0442cc0c 6a4bf451 0d13afb0 00000001 00000001 mshtml!CScriptCollection::InvokeEx+0x8a
  287. 0442ec80 6a463148 094cceb8 00002712 00000001 mshtml!CWindow::InvokeEx+0x6ad
  288. 0442eca8 6a463104 094cceb8 00002712 00000001 mshtml!CBase::VersionedInvokeEx+0x20
  289. 0442ecf8 6a4bf4eb 0ce59fd8 00002712 00000001 mshtml!PlainInvokeEx+0xeb
  290. 0442ed68 6a4b2604 094cefa0 00002712 00000001 mshtml!COmWindowProxy::InvokeEx+0x339
  291. 0442ed90 6a463148 094cefa0 00002712 00000001 mshtml!COmWindowProxy::subInvokeEx+0x26
  292. 0442edb8 6a463104 094cefa0 00002712 00000001 mshtml!CBase::VersionedInvokeEx+0x20
  293. 0442ee0c 6f43a22a 08ebcfd8 00002712 00000001 mshtml!PlainInvokeEx+0xeb
  294. 0442ee48 6f43a175 1332cd10 00002712 00000409 jscript!IDispatchExInvokeEx2+0x104
  295. 0442ee84 6f43a3f6 1332cd10 00000409 00000001 jscript!IDispatchExInvokeEx+0x6a
  296. 0442ef44 6f47d08b 00002712 00000001 00000000 jscript!InvokeDispatchEx+0x98
  297. 0442ef74 6f44e3e7 1332cd10 00000000 00000001 jscript!VAR::InvokeByDispID+0x157
  298. 0442f110 6f445c9d 0442f128 0442f26c 12310f88 jscript!CScriptRuntime::Run+0x2b80
  299. 0442f1f8 6f445bfb 0442f26c 00000000 07bf2fd0 jscript!ScrFncObj::CallWithFrameOnStack+0xce
  300. 0442f240 6f445e11 0442f26c 00000000 07bf2fd0 jscript!ScrFncObj::Call+0x8d
  301. 0442f2bc 6f43f3ee 12310f88 0442f500 00000000 jscript!CSession::Execute+0x15f
  302. 0442f3a4 6f43ea2e 00000000 00000001 0442f45c jscript!NameTbl::InvokeDef+0x1b5
  303. 0442f428 6a4d7af1 12310f88 00000000 00000409 jscript!NameTbl::InvokeEx+0x12c
  304. 0442f478 6a4d7b91 094cefa0 12310f88 00000000 mshtml!CBase::InvokeDispatchWithThis+0x1e1
  305. 0442f5a4 6a48f3f1 000003eb 80011790 084c9fd8 mshtml!CBase::InvokeEvent+0x214
  306. 0442f6fc 6a426a12 000003eb 80011790 6a426a94 mshtml!COmWindowProxy::FireEvent+0x169
  307. 0442f738 6a426dde 13be8f30 08b63680 13be8f30 mshtml!COmWindowProxy::Fire_onload+0xd5
  308. 0442f794 6a426aaf 13bf8fc0 08b63694 08b63680 mshtml!CMarkup::OnLoadStatusDone+0x40a
  309. 0442f7b4 6a426fad 00000004 0442fc40 0000001c mshtml!CMarkup::OnLoadStatus+0x47
  310. 0442fc08 6a3b4fab 12ebcf48 00000000 0442fc4c mshtml!CProgSink::DoUpdate+0x549
  311. 0442fc18 6a4594b2 12ebcf48 12ebcf48 09484d58 mshtml!CProgSink::OnMethodCall+0x12
  312. 0442fc4c 6a4437f7 0442fce8 00008002 00000000 mshtml!GlobalWndOnMethodCall+0xff
  313. 0442fc6c 770f86ef 00270212 000000d4 00000000 mshtml!GlobalWndProc+0x10c
  314. 0442fc98 770f8876 6a431de3 00270212 00008002 USER32!InternalCallWinProc+0x23
  315. 0442fd10 770f89b5 00000000 6a431de3 00270212 USER32!UserCallWinProcCheckWow+0x14b
  316. 0442fd70 770f8e9c 6a431de3 00000000 0442fdf8 USER32!DispatchMessageWorker+0x35e
  317. 0442fd80 6e9c04a6 0442fd98 00000000 03407f58 USER32!DispatchMessageW+0xf
  318. 0442fdf8 6e9d0446 055e4808 00000000 0309eff0 IEFRAME!CTabWindow::_TabWindowThreadProc+0x452
  319. 0442feb0 75fa49bd 03407f58 00000000 0442fecc IEFRAME!LCIETab_ThreadProc+0x2c1
  320. 0442fec0 757b1174 0309eff0 0442ff0c 76fdb3f5 iertutil!CIsoScope::RegisterThread+0xab
  321. 0442fecc 76fdb3f5 0309eff0 65926d87 00000000 kernel32!BaseThreadInitThunk+0xe
  322. 0442ff0c 76fdb3c8 75fa49af 0309eff0 00000000 ntdll!__RtlUserThreadStart+0x70
  323. 0442ff24 00000000 75fa49af 0309eff0 00000000 ntdll!_RtlUserThreadStart+0x1b
  324.  
  325.  
  326. SYMBOL_STACK_INDEX: 0
  327.  
  328. SYMBOL_NAME: mshtml!CMarkup::IsConnectedToPrimaryMarkup+6
  329.  
  330. FOLLOWUP_NAME: MachineOwner
  331.  
  332. MODULE_NAME: mshtml
  333.  
  334. IMAGE_NAME: mshtml.dll
  335.  
  336. DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bda8a
  337.  
  338. STACK_COMMAND: ~5s ; kb
  339.  
  340. FAILURE_BUCKET_ID: INVALID_POINTER_READ_c0000005_mshtml.dll!CMarkup::IsConnectedToPrimaryMarkup
  341.  
  342. BUCKET_ID: APPLICATION_FAULT_INVALID_POINTER_READ_mshtml!CMarkup::IsConnectedToPrimaryMarkup+6
  343.  
  344. WATSON_STAGEONE_URL: http://watson.microsoft.com/StageOne/iexplore_exe/8_0_7600_16385/4a5bc69e/mshtml_dll/8_0_7600_16385/4a5bda8a/c0000005/00158d1d.htm?Retriage=1
  345.  
  346. WATSON_IBUCKET: -970271373
  347.  
  348. WATSON_IBUCKETTABLE: 1
  349.  
  350. Followup: MachineOwner
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!