Lucene search
K

browser.forkbomb.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 43 Views

Repeated browser spawning through Javascript can cause endless window creation and browser slowdown.

Code
`Jim Paris <[email protected]>  
  
http://home.jtan.com/~jim/bugs/both/fork.html  
  
Repeated Browser Spawning  
  
New browser windows can be opened automatically with Javascript's window.open command. This page simply spawns a neverending supply of  
windows. This is similar to the Unix "while(1){fork();}" attack. Any browser that supports opening new windows with Javascript is vulnerable.  
  
I read that Netscape 4.x has a 100 window limit for untrusted pages. There are two problem with this. First, 100 is still a lot of windows to have open at  
once. Also, as soon as you close the 100th browser window, a new one is spawned.  
  
Sometimes you can close the windows faster than they come up, and once you close them all, it will stop. Sometimes you can't, and rebooting is  
necessary.  
  
The most effective way to write this script would be to have each new window run a new copy, making the browser spawning exponential. This can put  
a load on the remote server, however, because each new window would request a new copy of the page if the user's browser is configured to always  
check for new pages. As a result, all of the spawned windows are empty in the example below.  
  
The link below points to the following HTML page:  
  
<html><head><title>Browser Spawning!</title></head><body>  
<script>while(1) window.open("")</script>  
</body></html>  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 1999 00:00Current
7.4High risk
Vulners AI Score7.4
43