Description
Microsoft Internet Explorer 7.0 Beta3 and earlier allows remote attackers to cause a denial of service (crash) via a "text/html" HTML Content-type header sent in response to an XMLHttpRequest (AJAX).
References
- 18510 vdb-entry
- ie-ajax-dos(21553) vdb-entry
- 20050726 Internet Explorer AJAX Bug mailing-list