Bring Down Internet Explorer In Six Words 239
Marcion writes "Some handy Japanese guy called Hamachiya discovered a bug in Internet Explorer. Under certain conditions, an asterisk when used as a wildcard can crash IE as soon as the user attempts to go to another page." The article claims the "five HTML tags and a CSS declaration" crash IE7 as well as IE6, but I couldn't get IE7 to fail. This page says that as of June, IE6 was at about 37% market share and IE7 under 20%.
Is it crashed or not? (Score:4, Interesting)
It takes a few seconds to crash after the new tab is opened; that's enough time to type in an auto-completed URL and have it start loading. Strange thing about this is that even though Windows shows the standard "crashed" dialog box for IE, beneath that I can still see (e.g.) Slashdot continue to load in the background until I dismiss the dialog.
html source is: (Score:2, Interesting)
</style><table><input></table>
Common to Trident? (Score:5, Interesting)
If it's Trident that's bringing down IE, then you're looking at HTML code that could also bring down Windows Media Player, several versions of Outlook and Outlook Express, MSN Messenger, Steam (from Valve), and other applications which use it to render web pages. I think at least some versions of Winamp used trident as well, but I'm not sure about that.
Re:html source is: (Score:3, Interesting)
mshtml.dll! 7dcaac6e() mov eax,dword ptr [ecx+4]
7DCAAC6C nop
7DCAAC6D nop
7DCAAC6E mov eax,dword ptr [ecx+4]
7DCAAC71 test al,1
7DCAAC73 jne 7DCB3229
7DCAAC79 and eax,2
7DCAAC7C ret
7DCAAC7D nop
Not that I have any clue what that means since I never learned assembly