Vulnerability Development mailing list archives

Re: its: recursion


From: BlueBoar () THIEVCO COM (Blue Boar)
Date: Wed, 9 Feb 2000 20:16:05 -0800


Sean Burford wrote:

A single its://. href is enough to crash ie 5.00.2919.63071C for me.  I'm
running NT 4 SP6a.

Example: <A HREF="its://.">do not click me</A>

Put 37 concatenated "its:" strings as a target url and IE4 crashes
when trying to handle that url.. No I don't know if you wanted
to know this.
<a
href="its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:.">do
not click me</a>

On Win98, the single one doesn't do anything, but the 37 together crash
IE.
Netscape doesn't care.  My IE help:about says 5.00.2919.6307 .

                                                BB


Current thread: