anyedie Posted August 7, 2007 Share Posted August 7, 2007 To Mods: Maybe this should go in 'news', if it does move it. :) I dont think its has been shown here yet, but a guy named Hamachiya2 discoverd a flaw in IE 6 that will crash it. Just one line of HTML code, <style>*{position:relative}</style><table><input></table> lolz. From all accounts it renders fine in Opera, firefox, and IE 7 If you wish to try it out using IE 6 click below: http://immike.net/scripts/ie_crash.html source: http://immike.net/blog/2007/08/06/single-l...l-crashes-ie-6/ Quote Link to comment Share on other sites More sharing options...
jollyrancher82 Posted August 7, 2007 Share Posted August 7, 2007 If you're gonna code bad HTML like that, I'm not suprised IE crashes. Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 7, 2007 Share Posted August 7, 2007 If you're gonna code bad HTML like that, I'm not suprised IE crashes. Wold that be given IE's reputation? Quote Link to comment Share on other sites More sharing options...
digip Posted August 7, 2007 Share Posted August 7, 2007 Doesn't crash the pc, but does close ie6. Some people have reported it crashing their pc, but mine just closes ie6 with no error. Seems it doesn't matter what position method you use either. Relative or absolute do the same thing. There are also many possible ways to crash it. Ex: <style>*{position:absolute}</style><table><blockquote>a</table> I think anything with an * style and code following the table tag will cause it to crash becasue it can't render * position for * contents of a table. There are probably other tags that will work, but I am not going to sit here all day looking through them, and it isn't very usefull unless you could insert a payload along with this because it closes so quickly we can't see how far you get before it could execute any code after the tables. I wonder if you can do this with MySpace, because they allow you to use style tags, but no html. If you css in your page and anywhere in their page they render a table, it should crash the page, right? Quote Link to comment Share on other sites More sharing options...
digip Posted August 7, 2007 Share Posted August 7, 2007 Just tested it on MySpace and it killed ie6. Now, wonde rif it can be put into a comment without being removed? Quote Link to comment Share on other sites More sharing options...
natural_orange Posted August 8, 2007 Share Posted August 8, 2007 it works in "IETAB" for FFX too Quote Link to comment Share on other sites More sharing options...
Sparda Posted August 8, 2007 Share Posted August 8, 2007 it works in "IETAB" for FFX too Works as in IE crashes, or works as in the HTML renders? Quote Link to comment Share on other sites More sharing options...
natural_orange Posted August 8, 2007 Share Posted August 8, 2007 it crashes firefox if you open it in ietab Quote Link to comment Share on other sites More sharing options...
HaloChris117 Posted August 16, 2007 Share Posted August 16, 2007 Tried it in IE7, didn't crash. . Quote Link to comment Share on other sites More sharing options...
digip Posted August 16, 2007 Share Posted August 16, 2007 Tried it in IE7, didn't crash. . I forget where, but there is a way to bring down IE7 with this as well, but it ivolves something with the tabs or maybe when tabs are off? Can't remember, but I am sure there is a way to do it on IE7. Quote Link to comment Share on other sites More sharing options...
DLSS Posted August 16, 2007 Share Posted August 16, 2007 Tried it in IE7, didn't crash. . if you open it in the second tab ie7crashes aswell :P do the following : open any random site in 1st tab, open http://hamachiya.com/junk/ie_crash.html in the second, switch back to first tab and have a few secs patience .... tada crash ... Quote Link to comment Share on other sites More sharing options...
digip Posted August 16, 2007 Share Posted August 16, 2007 Tried it in IE7, didn't crash. . if you open it in the second tab ie7crashes aswell :P do the following : open any random site in 1st tab, open http://hamachiya.com/junk/ie_crash.html in the second, switch back to first tab and have a few secs patience .... tada crash ... I knew it had somehting to do with the tabs...thanks. Quote Link to comment Share on other sites More sharing options...
Deveant Posted August 18, 2007 Share Posted August 18, 2007 nothing to do with tabs, that one is a virus. Set up ur scrip on my private host and crashs IE6 not IE7, run it on IE7 in second tab and just loads a input. -edit- It works took about 30 secs though to crash mine though :S and the AV's pick it up as a virus :S Quote Link to comment Share on other sites More sharing options...
DLSS Posted August 18, 2007 Share Posted August 18, 2007 nothing to do with tabs, that one is a virus. Set up ur scrip on my private host and crashs IE6 not IE7, run it on IE7 in second tab and just loads a input. -edit- It works took about 30 secs though to crash mine though :S and the AV's pick it up as a virus :S weird mine's detects it as a vbs virus aswell now , but last time i checked it didnt, and it didt have any hostile code, was the page changed or is this a wrong warning ? *edit* its a invalid warning basically cos of the 1 lined script .... just temp disable yer av and wget the file and watch the code .... all it contains is the script : <!-- Easy IE Crash by Hamachiya2 (http://hamachiya.com/junk/ie_crash.html) --> <style>*{position:relative}</style><table><input> Quote Link to comment Share on other sites More sharing options...
DLSS Posted August 18, 2007 Share Posted August 18, 2007 *update* ok so check this out : put the one line in a .html file, scan it useing your av, it wil detect .... now encode it useing javascript ... <script language="JavaScript"> document.write(unescape("x3cx73x74x79x6cx65x3ex2ax7bx70x6fx73x69x74x69x6fx6ex3ax72x65x6cx61x74x69x76x 65x7dx3cx2fx73x74x79x6cx65x3ex3cx74x61x62x6cx65x3ex3cx69x6ex70x75x74x3e")) </script> now scan the file ... no detection :P yet it still works in ie6 and ie7 :P *update* arg nevermind, what the av does is useless , it doesnt detect the actual script that kills the browser but the signature of the creater combined with it. <!-- Easy IE Crash by Hamachiya2 (http://hamachiya.com/junk/ie_crash.html) --> so you can still use the original undetected, wtf ?? can the av makers get their head out of their ass ? Quote Link to comment Share on other sites More sharing options...
digip Posted August 18, 2007 Share Posted August 18, 2007 Is it the sig? or just this: "Easy IE Crash" Quote Link to comment Share on other sites More sharing options...
DLSS Posted August 18, 2007 Share Posted August 18, 2007 Is it the sig? or just this: "Easy IE Crash"well basically everything toghether .... the sig alone wont be detected and the line wont be detected, combine the 2 and avast goes mental :roll: Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.