Re: [Full-Disclosure] [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )

• Previous message: Paul Tinsley: "Re: [Full-Disclosure] Proof of concept for Windows Messenger Service overflow"
• In reply to: Thomas Rogg: "Re: [Full-Disclosure] [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )"
• Next in thread: Davide Del Vecchio: "[Full-Disclosure] Re: Pure html DOS although some version require minor user interaction ( highlighting/minimising )"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

To: full-disclosure@lists.netsys.com
Date: Sat, 18 Oct 2003 17:47:21 -0700 (PDT)

Has no effect on IE6.0 on Win2k SP4 with no IE
patches.

--
S.G.Masood
Hyderabad,
India.
--- Thomas Rogg <thomas@outcast-media.com> wrote:
> am 18.10.2003 6:29 Uhr schrieb John unter
> mccann@lexicon.net:
> 
> > Basicly this simple employees a HEAP of <big> tags
> and only requires a
> > single closing tag. Someone versions on view will
> die others require
> > something to activate rendering I assume this
> could be done via a java
> > script.
> > 
> > Proof of concept
> > 
> > http://www.lexicon.net/mccann/t.html
> > 
> > Mozilla doesn't crash some version my experience
> high cpu usage while
> > rendering also the layout will be stuffed but it
> is also a problem with
> > overflowing font sizes.
> > Opera untested.
> > Other untested.
> Tried it twice, crashed IE 5.0 (didn't know I still
> had it on my hard drive)
> under Mac OS 9 both times and took the whole system
> with it (OS 9 doesn't
> have any memory protection etc).
> 
> Nice work.
> 
> -- Thomas
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
http://lists.netsys.com/full-disclosure-charter.html
__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Previous message: Paul Tinsley: "Re: [Full-Disclosure] Proof of concept for Windows Messenger Service overflow"
• In reply to: Thomas Rogg: "Re: [Full-Disclosure] [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )"
• Next in thread: Davide Del Vecchio: "[Full-Disclosure] Re: Pure html DOS although some version require minor user interaction ( highlighting/minimising )"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]