[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )



Has no effect on IE6.0 on Win2k SP4 with no IE
patches.


--
S.G.Masood
Hyderabad,
India.





--- Thomas Rogg <thomas@outcast-media.com> wrote:
> am 18.10.2003 6:29 Uhr schrieb John unter
> mccann@lexicon.net:
> 
> > Basicly this simple employees a HEAP of <big> tags
> and only requires a
> > single closing tag. Someone versions on view will
> die others require
> > something to activate rendering I assume this
> could be done via a java
> > script.
> > 
> > Proof of concept
> > 
> > http://www.lexicon.net/mccann/t.html
> > 
> > Mozilla doesn't crash some version my experience
> high cpu usage while
> > rendering also the layout will be stuffed but it
> is also a problem with
> > overflowing font sizes.
> > Opera untested.
> > Other untested.
> Tried it twice, crashed IE 5.0 (didn't know I still
> had it on my hard drive)
> under Mac OS 9 both times and took the whole system
> with it (OS 9 doesn't
> have any memory protection etc).
> 
> Nice work.
> 
> -- Thomas
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
http://lists.netsys.com/full-disclosure-charter.html


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html