• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Crash IE with plain HTML

  • Thread starter Thread starter
  • Start date Start date
http://www.theinquirer.net/?article=9288
Internet Explorer's dumbest bug ever revealed

One line of HTML and it's dead

By Staff at the Newsdesk: Friday 02 May 2003, 18:08

BORED OF CREATING buffer overflow possibilities and security gaps an electronic elephant could walk through, Microsoft's Internet Explorer development team has turned its attention to good old HTML. Thankfully, this bug just crashes IE. Embarrassingly for the Vole, it's done with just one malformed line of HTML.

The bug is listed on BugTraq as requiring five lines of HTML but, after a small amount of experimentation, you'll find that it can be done with just one line of HTML. The offending line?

<input type crash>

In fact, the word "crash" doesn't really make any difference; you can put "calamari" or "IE sucks" in there and it will still go belly up.

So the Vole has definitely managed to outdo itself this time. According to Neowin, Outlook, Frontpage and anything else that uses shlwapi.dll suffers the same fate. So that simple line of malformed HTML could stop you from reading your email too.
Click to expand...
 
I just sent myself an email with the code in it and it crashed outlook. This is bad. I guess Microsoft's developers are going to be working today.
 
Originally posted by: dwell
I just sent myself an email with the code in it and it crashed outlook. This is bad. I guess Microsoft's developers are going to be working today.
Click to expand...

haha damn it works!

AMEESH FIX THIS NOW! 😛
 
That's pretty bad, not too many "common" internet peeps update their IE, this is going to cause problems for a while.
 
Doesn't crash NS 6.23. 🙂

At Microsoft, failure is not an option -- It's built in. :Q
 
Originally posted by: Harvey
Doesn't crash NS 6.23. 🙂

At Microsoft, failure is not an option -- It's built in. :Q
Click to expand...
NS? Can you say non-compliant?

NS would be great if they would just comply with standard codes...
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top