Bugtraq mailing list archives
Re: IE, Firefox, Opera DoS
From: Dan Pixley <danpixley () cox net>
Date: Mon, 23 Aug 2004 13:09:38 +0000
Tested this in Mozilla 1.7.2 and Epiphany 1.2.6 in Linux (kernel 2.6.8, Gentoo, Gnome 2.6.2). Each browser comes up with a warning about running the script. The user can chose to run it or not. Either way, a dialog box reloads over and over until the main window is forced closed with xkill. Dan Pixley On Sat, 2004-08-21 at 20:41, exploits () su1d net wrote:
Description ======== Browser DoS through viewing of a malicious page that repeatedly loads iframes of C:\Windows\System32 using 100% cpu Tested on Mozilla Firefox 0.9.3, Opera 7.54 and IE 6.0 - Opera gives the error "The address type is unknown or unsupported" over and over POC === URL : http://www.su1d.net/iframe2.html <scr1pt language="JavaScript"> while(true) { document.write("<iframe src=\"C:\Windows\system32\"></iframe>"); } </scr1pt> Discovered by MeFakon from the su1d exploit development team
Current thread:
- IE, Firefox, Opera DoS exploits (Aug 23)
- Re: IE, Firefox, Opera DoS Dan Pixley (Aug 24)
- RE: IE, Firefox, Opera DoS GulfTech Security (Aug 25)
- RE: IE, Firefox, Opera DoS (*not* a DoS, not even close) Steve R (Aug 27)
- RE: IE, Firefox, Opera DoS GulfTech Security (Aug 25)
- Re: IE, Firefox, Opera DoS Dan Pixley (Aug 24)