Bugtraq mailing list archives
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
From: "Andrius Paurys" <andrius.paurys () gmail com>
Date: Thu, 7 Dec 2006 19:00:59 +0200
On 12/6/06, José Carlos Nieto Jarquín <xiam.core () gmail com> wrote:
Note: I'm sorry, two of the the exploits in the prior e-mail were incomplete. This is just another couple of proof of concept exploits for this well-known browser. The third one is a lame combination of both. Tested under Windows XP SP2, MSIE 6.0.2900.2180
Also confirmed working on Windows Server 2003 R2 (Build 3790) with Internet Explorer 7.0.5730.11 1st exploit was working fine putting iexplore.exe at 100% CPU. It complained about "IE restricting this web page from running scripts" (probably because of enabled Internet Explorer Enhanced Security Configuration), but if you click "allow this website to run this" (which is enabled by default if above mentioned IE ESC is not present) it works. 2nd and 3rd were not exactly working, (also because of IE ESC) because after clicking allow after several windows it was asking again, but should work on WinXP and IE7. -- Andrius Paurys $h@MAN andrius.paurys () gmail com Tel.: +37067449273 ICQ: 279424019 MSN: andrius.paurys () gmail com http://shaman.tinkle.lt/ I'm Lithuanian, what's _your_ excuse? Sėdi programeris nevalgęs ir nieko...
Current thread:
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) José Carlos Nieto Jarquín (Dec 06)
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) Andrius Paurys (Dec 07)
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) chinese soup (Dec 08)
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) chinese soup (Dec 12)
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) chinese soup (Dec 08)
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) Andrius Paurys (Dec 07)