Description
The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetting the "location" variable within the loop.
References
- 20060218 Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines. mailing-list
- ie-script-engine-stack-dos(24788) vdb-entry
- 20060216 Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines. mailing-list
- 16687 vdb-entry