Full Disclosure mailing list archives

IE local DoS


From: "Sourvivor" <sourvivor () phreaker net>
Date: Wed, 18 Aug 2004 02:29:28 +0200

this iframe cause a infinite bucle in IE.

<iframe src="?">

the first iframe is: $file
the second iframe is: $file?
the X iframe is: $file?*X

IE have a protection to block this bucle, but if the name file change the protection is not enable
(*NOTE: The file name change: $file, $file?, $file??, $file??? ...)

Sourvivor,
www.thesur.com/sourvivor/sourvivor.asc

Current thread: