IE Crash bug. This one's tiny, too!

Einhander Sn0m4n · Post by **Einhander Sn0m4n** » 2003-05-03 02:48pm

HTML Render Crashes Idiot Exploiter! <==Slashdot Link

Source Code for the Crashy Thing:

< html >
< form >
< input type crash >
< /form >
< /html >

Stupid, ain't it?

(spaces between the < and >s just in case by the grace of that Yahweh idiot everyone's M$IE tries to render it despite the <code> tags.

*rails Bill Fucking Gates in the FUCKING FOOT!!*

Admiral Valdemar · Post by **Admiral Valdemar** » 2003-05-03 02:49pm

Did I read that right? That thing crashes IE?!

Post by **Dalton** » 2003-05-03 02:50pm

Confirmed here. Wow.

Durandal · Post by **Durandal** » 2003-05-03 02:52pm

It's probably just debugging code that was left in there by the programmers when they wanted to test crash-recovery stuff. They just forgot to take it out.

Einhander Sn0m4n · Post by **Einhander Sn0m4n** » 2003-05-03 02:53pm

BTW is it against policy to publish source code for IE Crash 'Sploits?

phongn · Post by **phongn** » 2003-05-03 03:07pm

That's not source code, that's a chunk of HTML.

HTML crashing browsers is nothing new. NS4 in particular was infamous for this, and Mozilla is not immune to this. Furthermore, this seems intentional on the part of Microsoft (though accidentially left in place).

At any rate, you could have posted a link with substance, like the actual BugTraq notice.

Crayz9000 · Post by **Crayz9000** » 2003-05-03 03:10pm

As I recall, this bug was old news back in 2000.

For that matter, there was also the img=C:\CON\CON exploit for any old Windows 9x box... caused an instant bluescreen.