![]() | |
![]() |
| | Thread Tools | Display Modes |
#1
| |||
| |||
|
|
The malformed HTML code involve <font> and vertical-align like this: div style="vertical-align: top;" p>First <font size="4">Paragraph</p p>Second </font> Paragraph</p /div Everything was nicely reported and clearly explained in october 2003 and the bug is still reproducible, 100% of the time. Page where this bug is explained: http://jehiah.com/archive/ie-vertica...-vulnerability Proof of concept: http://www.jehiah.com/sandbox/vertical-align-top.htm |
![]() |
| Thread Tools | |
| Display Modes | |
| |