History :
[2008-10-07] Started

  Affected software :  

Internet Explorer 7

  Text :  

After I finished up zfz beta 2.0, I was tired. I had been working near
non-stop on it for quite a while and I felt like I needed a break. So, I
shut down all the lab boxes and tried to get some sleep. So after the
attempt to replenish my bodies' health with rest, another idea popped into
my head. Codebase for another fuzzer was born soon there after. Back to
work I go.

meta http-equiv="A x xxxxx" content="1"

In case your not familiar with http-equiv, it is basically HTTP headers
equivalent-ized in HTML. It can be very helpful and engages lots of
development with web applications.

Replacing "xxxxx" with ~16 million bytes will make IE hang for
about an hour. Open task manager and you should see 100% CPU usage. This
was tested on two different computers running Windows Vista and Internet
Explorer 7, both nearly or fully patched. Firefox hits some bumps but
nothing like IE. Google's Chrome, Opera, and Safari barely seemed affected
by this. Quick byte, run for cover!

  References :  

http://jbrownsec.blogspot.com/2008/10/internet-explorer-7-resource.html