Full Disclosure mailing list archives

Re: [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )


From: S G Masood <sgmasood () yahoo com>
Date: Sat, 18 Oct 2003 17:47:21 -0700 (PDT)

Has no effect on IE6.0 on Win2k SP4 with no IE
patches.


--
S.G.Masood
Hyderabad,
India.





--- Thomas Rogg <thomas () outcast-media com> wrote:
am 18.10.2003 6:29 Uhr schrieb John unter
mccann () lexicon net:

Basicly this simple employees a HEAP of <big> tags
and only requires a
single closing tag. Someone versions on view will
die others require
something to activate rendering I assume this
could be done via a java
script.

Proof of concept

http://www.lexicon.net/mccann/t.html

Mozilla doesn't crash some version my experience
high cpu usage while
rendering also the layout will be stuffed but it
is also a problem with
overflowing font sizes.
Opera untested.
Other untested.
Tried it twice, crashed IE 5.0 (didn't know I still
had it on my hard drive)
under Mac OS 9 both times and took the whole system
with it (OS 9 doesn't
have any memory protection etc).

Nice work.

-- Thomas

_______________________________________________
Full-Disclosure - We believe in it.
Charter:
http://lists.netsys.com/full-disclosure-charter.html


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: