Microsoft Internet Explorer 5/6 - CSSText Bold Font Denial of Service

EDB-ID:

21556




Platform:

Windows

Date:

2002-06-15


source: https://www.securityfocus.com/bid/5027/info

A problem with Microsoft Internet Explorer may make it possible to deny service to users of the browser. The problem is in the handling of certain types of stylesheet input.

It may be possible to crash IE. When IE encounters a style sheet with the p{cssText} element declared, and a font weight of bold is specified, the browser crashes. This could be used as a denial of service attack.


<style>p{cssText: font-weight: bold;}</style>