用 html crash IE^^

[pahud]

from my friend

http://www.securityfocus.com/archive/1/ ... 03-04-26/0
http://www.secunia.com/advisories/8642/


From Security Focus:
"This HTML also crash Outlook, Frontpage, and all the Microsoft
programs that use the shlwapi.dll library to render web code."

It's a null pointer overwrite, so it's not easly exploitable...