Log in

View Full Version : Crash IE with one line of markup.


shachi
08-23-2006, 07:10 PM
Hey check out what I found, run this in IE:

URL removed by admin

I am not sure about IE7 but it should work for IE 5-6
Twey
08-23-2006, 07:48 PM
Being as HTML ignores linebreaks "one line of markup" isn't really a very impressive claim :)

It doesn't work, anyway. I tested it in IE6.
DimX
08-23-2006, 08:00 PM
Ha! Sure, press that original link and you'll get a virus warning (if your antivirus software is good enough ofcourse).
Indeed an IE crasher :p
blm126
08-23-2006, 08:06 PM
Yup, virus warning.
Twey
08-23-2006, 08:26 PM
Hmm? I wonder what I did wrong then.
mwinter
08-23-2006, 08:34 PM
It doesn't work, anyway. I tested it in IE6.

It doesn't work in my IE6 SP2, either. However, it does crash my standalone IE5.5. :)




Ha! Sure, press that original link and you'll get a virus warning (if your antivirus software is good enough ofcourse).

Yes, but that's just to protect the shoddiest piece of software on the Web, rather than to protect you against a virus.

You can try this yourself: copy the markup that shachi posted (if you remember it; I see it's been removed, now), paste it into Notepad, and save it as a text file. No problem, right? Now rename it to have a .html extension, and you'll get a virus warning (if you have an on-access scanner).

There's no virus: IE is just crap.

Mike
ddadmin
08-23-2006, 08:42 PM
Please don't post any actual code or link to something potentially malicious on the forums, as while your intentions may be to educate or for sake of discussion, you never know who's reading the thread, or if an innocent forum member may get negatively affected by it.
shachi
08-24-2006, 03:41 PM
ddadmin: Sorry for my mistake. I did not think of the consequences when I posted it. If you think it is wrong then you can immediately delete this post.

Twey: actually it did crash ie4lin(5,5.5 and 6).
Twey
08-24-2006, 04:08 PM
I don't think it should really be a problem if it's made perfectly clear that it will crash IE...
blm126
08-24-2006, 07:38 PM
Yes, but there are people out there who want to crash IE.
Twey
08-24-2006, 07:50 PM
Then there are plenty of better places out there to find info about the vulnerability than DD :)
blm126
08-24-2006, 08:01 PM
I guess.
ddadmin
08-24-2006, 09:21 PM
ddadmin: Sorry for my mistake. I did not think of the consequences when I posted it. If you think it is wrong then you can immediately delete this post.

Don't worry about it, as the code/link itself has already been removed.