Windows image size crash

From: RSnake (rsnake_at_shocking.com)
Date: 05/13/05

  • Next message: Tim Tompkins: "cross-domain cookie theft: who's to blame?"
    Date: Thu, 12 May 2005 21:44:11 -0700 (PDT)
    To: bugtraq@securityfocus.com
    
    

             I've tried this on two different versions of Windows: 2000 and XP
    Pro SP1 and SP2 with IE6.0 and Firefox 1.0.3 and 1.0.4, and at minimum
    it causes the tab that holds the content in Firefox to freeze and at the
    worst it causes a blue screen after a few seconds for both IE and
    Firefox. All but one machine required a reboot. I'm sure someone with
    more expertise could find the root of the issue (seems like it's giving
    a stack error). The only trick here is that it seems to require a large
    image to be called (like the one in this example). I've tried it with
    smaller images and it still causes a spike in load but it's recoverable.

             Here's a live example with a large image in it:

    http://ha.ckers.org/imagecrash.html

             Here's the HTML:

    <HTML>
       <BODY>
          <IMG SRC="./imagecrash.jpg" width="9999999" height="9999999">
       </BODY>
    </HTML>

             Not sure if there is more here. I did get one person on MacOS
    10 to test this and it had no effect. Thanks to everyone who let me
    crash their machines testing this. :)

    -RSnake http://ha.ckers.org/xss.html XSS Cheatsheet


  • Next message: Tim Tompkins: "cross-domain cookie theft: who's to blame?"

    Relevant Pages

    • Re: Does everyone know about Myspace?
      ... the NoScript javascript ext, as well as the other etxentions need some ... from having to go into the firefox options and enable or disable the ... in another tab, but still leave me viewing the original page,... ... >>> those annoying google ads on the side of the posts. ...
      (alt.gathering.rainbow)
    • Re: Spam filters
      ... I don't understand how I use IE to open a tab for Firefox ... browser, which has little add-on programs ... which doesn't follow standard web design ...
      (alt.sewing)
    • Re: Does everyone know about Myspace?
      ... script capabilities with the default settings in I.E. ... > the NoScript javascript ext, as well as the other etxentions need some ... > from having to go into the firefox options and enable or disable the ... > in another tab, but still leave me viewing the original page,... ...
      (alt.gathering.rainbow)
    • Re: News Reader
      ... >>of the Mozilla Foundation is on Mozilla Firefox and Mozilla ... >Why do you use Mozilla, Firefox, Thunderbird, ect, ect, that seem to have ... Tab X: Adds a close button to each tab that is open. ...
      (rec.outdoors.rv-travel)
    • Re: WHICH BROWSER TO USE
      ... My tab mix plus doesn't keep all the tabs. ... I have worked with forums on Firefox ... require that you know enough to put them in the IE Trusted Security zone ... Calling an illegal alien an "undocumented worker" is like calling a ...
      (microsoft.public.windowsxp.help_and_support)