Bugtraq mailing list archives

Re: rare bug in Opera 9.20 browser


From: kaneda () bohater net
Date: Sun, 22 Jul 2007 05:45:19 +0200 (CEST)

On Thu, 18 Jul 2007, jplopezy () gmail com ar wrote:

:] In this opportunity I go to you with the purpose of communicating a strange fault to them that finds in operates. It 
consists of creating a document in HTML and in beating a chain of characters $/“(dollar, sweeps, comile) in hexadecimal 
serian (24 2F 22) this promouth that when trying to see the source code when lowering the bar to visualize the end of 
the east document promouth that the navigator fails I leave a test of concept down 
:] 

Its not exactly but some similars to "opera null byte display":

http://sla.ckers.org/forum/read.php?2,11896,11941#msg-11941

"
I've just noticed this, when you use Opera internal Source code viewer, it 
fails to display the whole html code if the page contains a NULL (0x00) 
char. Its not a big deal, but it can be abussed to hide evil javascript 
code for Opera users. I've just tested this in Opera for Windows. :] :] I 
leave a test of concept down :] "

On Linux it works too...

What is interesting, Opera fix this few months ago and now they again 
add this "future" to the software ;]

Kanedaaa

-- 
[][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]..
[+] You can take our lives,but you will never take our Freedom - W.Wallace
[+] Peace on earth depends on the peace in the peoples hearts - Dalai Lama
[+] Revolution the only solution - System of a down...
[+] Dalej idac dalej dojdziesz dalej siedzac dalej siedzisz - etoe aka ok0
[-] Kanedaaa... Bohateur... Cucumber Team Member...     kaneda () bohater net

Current thread: