BugTraq
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) Dec 06 2006 07:01AM
José Carlos Nieto Jarquín (xiam core gmail com) (1 replies)
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) Dec 07 2006 05:00PM
Andrius Paurys (andrius paurys gmail com) (1 replies)
On 12/6/06, José Carlos Nieto Jarquín <xiam.core (at) gmail (dot) com [email concealed]> wrote:
> Note:
> I'm sorry, two of the the exploits in the prior e-mail were incomplete.
>
> This is just another couple of proof of concept exploits for this
> well-known browser. The third one is a lame combination of both.
>
> Tested under Windows XP SP2, MSIE 6.0.2900.2180

Also confirmed working on Windows Server 2003 R2 (Build 3790) with
Internet Explorer 7.0.5730.11

1st exploit was working fine putting iexplore.exe at 100% CPU. It
complained about "IE restricting this web page from running scripts"
(probably because of enabled Internet Explorer Enhanced Security
Configuration), but if you click "allow this website to run this"
(which is enabled by default if above mentioned IE ESC is not present)
it works.

2nd and 3rd were not exactly working, (also because of IE ESC) because
after clicking allow after several windows it was asking again, but
should work on WinXP and IE7.

--
Andrius Paurys
$h@MAN

andrius.paurys (at) gmail (dot) com [email concealed]
Tel.: +37067449273
ICQ: 279424019
MSN: andrius.paurys (at) gmail (dot) com [email concealed]
http://shaman.tinkle.lt/

I'm Lithuanian, what's _your_ excuse?
SÄ?di programeris nevalgÄ?s ir nieko...

[ reply ]
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) Dec 08 2006 05:46PM
chinese soup (noodle mastah gmail com) (1 replies)
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) Dec 09 2006 09:21PM
chinese soup (noodle mastah gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus