Vulnerability Development mailing list archives

Re: MSIE crash-"feature"


From: "Richard Pachito" <alpyha () prodigy net>
Date: Wed, 23 Apr 2003 18:41:42 -0700

I  think it's pretty interesting how you can crash IE using that gif, but
not explorer when it goes to preview.  I thought it rendered the html using
IE?

----- Original Message -----
From: "Magnus Bodin" <magnus () bodin org>
To: <vuln-dev () securityfocus com>
Sent: Wednesday, April 23, 2003 1:35 AM
Subject: MSIE crash-"feature"



Sorry if this is old news already, but IE has a rather interesting feature
(tested with 6.0.2600.0000 whatever that means)

It crashes on very minimalistic code; check here:

    http://x42.com/test/ie_feature.html

It can be further stripped down and even sent as different MIME-type (see
old
posting about the MIME-"smartness in IE):

    http://x42.com/test/galopp.gif


For those who want to test it with their HTML-compatible mail reader, send
a mail to

    iecrash () x42 com

and you will get a HTML-mail in return.

/magnus

--
http://x42.com


Current thread: