• Welcome to Valhalla Legends Archive.
 

Highly stupid IE vulnerability

Started by Yoni, May 03, 2003, 07:18 AM

Previous topic - Next topic

Yoni

Found on Slashdot. Not sure whether this should go in the Fun Forum or here, but I put it here anyway.

The following HTML crashes "almost every version of IE past 4.0":

<html>
<form>
<input type crash>
</form>
</html>

Note that there is nothing special involved, no scripts, just plain HTML.
Expect a patch in a few days.

Thing

#1
Oh My God!  That is just too damn funny.

http://forum.valhallalegends.com/crash.html
That sucking sound you hear is my bandwidth.

iago

This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


tA-Kane

Doesn't crash my IE on my Mac... ;D :P
Macintosh programmer and enthusiast.
Battle.net Bot Programming: http://www.bash.org/?240059
I can write programs. Can you right them?

http://www.clan-mac.com
http://www.eve-online.com

Invert


Yoni

Quote from: tA-Kane on May 03, 2003, 02:14 PM
Doesn't crash my IE on my Mac... ;D :P
Haha... That's almost ironic.

Etheran

it gets worse, windows explorer in winxp crashes when you click on it and it tries to preview it on the side!!!!!

Yoni

Well, yes, it's a bug in the HTML renderer.
Anything that uses the HTML renderer and causes it to parse <input type someword> crashes.

Arta


Zakath

Haha...ph33r Opera not crashing when it views it! ;D
Quote from: iago on February 02, 2005, 03:07 PM
Yes, you can't have everybody...contributing to the main source repository.  That would be stupid and create chaos.

Opensource projects...would be dumb.

Grok

Naturally, it did not escape your notice that "IE" is not spelled O-p-e-r-a.

Zakath

Oh, come on Grok. You know me better than that. I was merely using this topic as an excuse to plug my web browser, which I believe is much, much better than IE. ;)
Quote from: iago on February 02, 2005, 03:07 PM
Yes, you can't have everybody...contributing to the main source repository.  That would be stupid and create chaos.

Opensource projects...would be dumb.