Description
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
References
- 20070418 Re: Internet Explorer Crash mailing-list
- 20070417 Internet Explorer Crash mailing-list
- ie-unspecified-dos(33715) vdb-entry
- 43314 vdb-entry
- 20070417 Re: Internet Explorer Crash mailing-list