full-disclosure - [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031019004721.26604.qmail@web11005.mail.yahoo.com>
From: sgmasood at yahoo.com (S G Masood)
Subject: [IE] Pure html DOS although some version require minor user interaction ( highlighting/minimising )

Has no effect on IE6.0 on Win2k SP4 with no IE
patches.


--
S.G.Masood
Hyderabad,
India.





--- Thomas Rogg <thomas@...cast-media.com> wrote:
> am 18.10.2003 6:29 Uhr schrieb John unter
> mccann@...icon.net:
> 
> > Basicly this simple employees a HEAP of <big> tags
> and only requires a
> > single closing tag. Someone versions on view will
> die others require
> > something to activate rendering I assume this
> could be done via a java
> > script.
> > 
> > Proof of concept
> > 
> > http://www.lexicon.net/mccann/t.html
> > 
> > Mozilla doesn't crash some version my experience
> high cpu usage while
> > rendering also the layout will be stuffed but it
> is also a problem with
> > overflowing font sizes.
> > Opera untested.
> > Other untested.
> Tried it twice, crashed IE 5.0 (didn't know I still
> had it on my hard drive)
> under Mac OS 9 both times and took the whole system
> with it (OS 9 doesn't
> have any memory protection etc).
> 
> Nice work.
> 
> -- Thomas
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
http://lists.netsys.com/full-disclosure-charter.html


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com