|
|
Summary:
Internet Explorer 6.0 and below hangs when entering prepared page
Details:
When using AJAX (Asynchronous JavaScript and XML) to load page content dynamicly we are allowed to do anything on the side of server. Internet Explorer process hangs when Content-type header is sent within.
Vulnerable Versions:
Internet Explorer 6.0 and below, tested on Windows XP, 2000 and 2003.
Patches/Workarounds:
Unknown.
Exploits:
Execute the following PHP script in IE to cause it's process to die.
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
xmlns="http://www.w3.org/1999/xhtml" xml:lang="pl" lang="pl">