Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)

[Andrius Paurys]

T24gMTIvNi8wNiwgSm9zw6kgQ2FybG9zIE5pZXRvIEphcnF1w6 1uIDx4aWFtLmNvcmVAZ21haWwu
Y29tPiB3cm90ZToKPiBOb3RlOgo+IEknbSBzb3JyeSwgdHdvIG 9mIHRoZSB0aGUgZXhwbG9pdHMg
aW4gdGhlIHByaW9yIGUtbWFpbCB3ZXJlIGluY29tcGxldGUuCj 4KPiBUaGlzIGlzIGp1c3QgYW5v
dGhlciBjb3VwbGUgb2YgcHJvb2Ygb2YgY29uY2VwdCBleHBsb2 l0cyBmb3IgdGhpcwo+IHdlbGwt
a25vd24gYnJvd3Nlci4gVGhlIHRoaXJkIG9uZSBpcyBhIGxhbW UgY29tYmluYXRpb24gb2YgYm90
aC4KPgo+IFRlc3RlZCB1bmRlciBXaW5kb3dzIFhQIFNQMiwgTV NJRSA2LjAuMjkwMC4yMTgwCgoK
QWxzbyBjb25maXJtZWQgd29ya2luZyBvbiBXaW5kb3dzIFNlcn ZlciAyMDAzIFIyIChCdWlsZCAz
NzkwKSB3aXRoCkludGVybmV0IEV4cGxvcmVyIDcuMC41NzMwLj ExCgoxc3QgZXhwbG9pdCB3YXMg
d29ya2luZyBmaW5lIHB1dHRpbmcgaWV4cGxvcmUuZXhlIGF0ID EwMCUgQ1BVLiBJdApjb21wbGFp
bmVkIGFib3V0ICJJRSByZXN0cmljdGluZyB0aGlzIHdlYiBwYW dlIGZyb20gcnVubmluZyBzY3Jp
cHRzIgoocHJvYmFibHkgYmVjYXVzZSBvZiBlbmFibGVkIEludG VybmV0IEV4cGxvcmVyIEVuaGFu
Y2VkIFNlY3VyaXR5CkNvbmZpZ3VyYXRpb24pLCBidXQgaWYgeW 91IGNsaWNrICJhbGxvdyB0aGlz
IHdlYnNpdGUgdG8gcnVuIHRoaXMiCih3aGljaCBpcyBlbmFibG VkIGJ5IGRlZmF1bHQgaWYgYWJv
dmUgbWVudGlvbmVkIElFIEVTQyBpcyBub3QgcHJlc2VudCkKaX Qgd29ya3MuCgoybmQgYW5kIDNy
ZCB3ZXJlIG5vdCBleGFjdGx5IHdvcmtpbmcsIChhbHNvIGJlY2 F1c2Ugb2YgSUUgRVNDKSBiZWNh
dXNlCmFmdGVyIGNsaWNraW5nIGFsbG93IGFmdGVyIHNldmVyYW wgd2luZG93cyBpdCB3YXMgYXNr
aW5nIGFnYWluLCBidXQKc2hvdWxkIHdvcmsgb24gV2luWFAgYW 5kIElFNy4KCgoKLS0gCkFuZHJp
dXMgUGF1cnlzCiRoQE1BTgoKYW5kcml1cy5wYXVyeXNAZ21haW wuY29tClRlbC46ICszNzA2NzQ0
OTI3MwpJQ1E6IDI3OTQyNDAxOQpNU046IGFuZHJpdXMucGF1cn lzQGdtYWlsLmNvbQpodHRwOi8v
c2hhbWFuLnRpbmtsZS5sdC8KCkknbSBMaXRodWFuaWFuLCB3aG F0J3MgX3lvdXJfIGV4Y3VzZT8K
U8SXZGkgcHJvZ3JhbWVyaXMgbmV2YWxnxJlzIGlyIG5pZWtvLi 4uCg==