[OT] Crash IE instantly!

Greg 'groggy' Lehey grog at lemis.com
Tue May 6 13:58:24 CST 2003

On Sunday,  4 May 2003 at 23:59:22 +0930, Richard Russell wrote:
> All,
> Check
> http://slashdot.org/article.pl?sid=03/05/02/1845241&mode=thread&tid=126&tid=
> 95&tid=128&tid=113
> (sorry if the URL is linesplit -- I'm on webmail)
> Basically, you can crash almost any version of IE (and a bunch of other
> programs that use the same DLL) with the HTML:
> ---
> <html>
> <form>
> <input type crash>
> </form>
> </html>
> ---
> Depending on the version of IE, even just the middle line will crash it on
> its own. There's an eg page at http://vibrantlogic.com/new.html -- but if
> you go there with IE, it will crash and burn horribly, losing every IE
> window you have open.
> As it happens, it's not actually the text "crash" that does it -- it's any
> text that isn't valid. It just causes a null pointer dereference. Isn't it
> great that MS would let such an odd bug through into millions of browsers?
> :)

Then I would think <input type Linux> would be more amusing.

Finger grog at lemis.com for PGP public key
See complete headers for address and phone numbers
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://www.linuxsa.org.au/pipermail/linuxsa/attachments/20030506/ae5ada61/attachment.bin

More information about the linuxsa mailing list