The issue:
Crashing IIS using ordinary vbscript in an ASP page. Using Regular
expressions one can filter eg the contents of an HTML page. In this case i
was planning to filter some words. But some servers crashed on a not valid
regular expression when i pressed F5 in VID.
myregexp.Global = TRUE
myregexp.IgnoreCase = true
' Normal regular expresion
'myregexp.Pattern = "[A-Z0-9\.\-\_\ ]+"
' A not valid expression
myregexp.Pattern = ".*"
set mymatches =myregexp.Execute (mystring)
for each thing in mymatches
Response.Write thing
next
%>
Results:
Winnt 4.0 Ent. sp5 IIS: (In the browser) a trappable error occured _or_ no
data is returned aka: normal reaction on invalid expression
Winnt 4.0 Ent. sp6 IIS: Inetinfo.exe crashes without any notice
Winnt 4.0 Ent. sp6a IIS: Inetinfo.exe dies eventlog message: