Page 1 of 1

IE Crash bug. This one's tiny, too!

Posted: 2003-05-03 02:48pm
by Einhander Sn0m4n
HTML Render Crashes Idiot Exploiter! <==Slashdot Link

Source Code for the Crashy Thing:

Code: Select all

< html >
< form >
< input type crash >
< /form >
< /html >
Stupid, ain't it?

(spaces between the < and >s just in case by the grace of that Yahweh idiot everyone's M$IE tries to render it despite the <code> tags.

*rails Bill Fucking Gates in the FUCKING FOOT!!*

Posted: 2003-05-03 02:49pm
by Admiral Valdemar
Did I read that right? That thing crashes IE?!

Posted: 2003-05-03 02:50pm
by Dalton
Confirmed here. Wow.

Posted: 2003-05-03 02:52pm
by Durandal
It's probably just debugging code that was left in there by the programmers when they wanted to test crash-recovery stuff. They just forgot to take it out.

Posted: 2003-05-03 02:53pm
by Einhander Sn0m4n
BTW is it against policy to publish source code for IE Crash 'Sploits?

Posted: 2003-05-03 03:07pm
by phongn
That's not source code, that's a chunk of HTML.

HTML crashing browsers is nothing new. NS4 in particular was infamous for this, and Mozilla is not immune to this. Furthermore, this seems intentional on the part of Microsoft (though accidentially left in place).

At any rate, you could have posted a link with substance, like the actual BugTraq notice.

Posted: 2003-05-03 03:10pm
by Crayz9000
As I recall, this bug was old news back in 2000.

For that matter, there was also the img=C:\CON\CON exploit for any old Windows 9x box... caused an instant bluescreen.