Vulnerability Development mailing list archives

Re: its: recursion


From: dimitry () KIEV SOVAM COM (Dmitry Alyabyev)
Date: Thu, 10 Feb 2000 10:04:19 +0200


hi

Thursday, February 10, 2000, 6:16:05 AM, Blue Boar wrote:

Sean Burford wrote:

A single its://. href is enough to crash ie 5.00.2919.63071C for me.  I'm
running NT 4 SP6a.

Example: <A HREF="its://.">do not click me</A>

Put 37 concatenated "its:" strings as a target url and IE4 crashes
when trying to handle that url.. No I don't know if you wanted
to know this.
<a
href="its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:.">do
not click me</a>

On Win98, the single one doesn't do anything, but the 37 together crash
IE.
Netscape doesn't care.  My IE help:about says 5.00.2919.6307 .

Opera 3.60/NT 4.0 - "The address type is unknown or unsupported" :)

--
Best rgds,                      Dimitry

nic-hdl: DYA7-RIPE              http://www.al.org.ua



Current thread: