Multiple Vendor Web Browser LiveConnect JavaScript Denial Of Service Vulnerability
BID:7227
Info
Multiple Vendor Web Browser LiveConnect JavaScript Denial Of Service Vulnerability
| Bugtraq ID: | 7227 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 28 2003 12:00AM |
| Updated: | May 24 2007 07:21PM |
| Credit: | Discovery of this vulnerability credited to Marc Schoenefeld <[email protected]>. |
| Vulnerable: |
Opera Software Opera Web Browser 7.0 win32 Opera Software Opera Web Browser 7.0 3win32 Opera Software Opera Web Browser 7.0 2win32 Opera Software Opera Web Browser 7.0 1win32 Netscape Navigator 7.0.2 Mozilla Firebird 0.6.1 Mozilla Firebird 0.5 Mozilla Browser 1.4 Mozilla Browser 1.2.1 Mozilla Browser 1.2 Alpha |
| Not Vulnerable: |
Mozilla Browser 1.0 |
Discussion
Multiple Vendor Web Browser LiveConnect JavaScript Denial Of Service Vulnerability
A denial-of-service vulnerability has been reported to affect several browsers. The vulnerability occurs when executing certain malformed JavaScript-enabled pages.
An attacker can exploit this vulnerability by creating a malicious JavaScript page that makes a call to certain methods. When an affected browser is used to view the malformed page, the Java Virtual Machine will crash, resulting in a denial-of-service condition.
A denial-of-service vulnerability has been reported to affect several browsers. The vulnerability occurs when executing certain malformed JavaScript-enabled pages.
An attacker can exploit this vulnerability by creating a malicious JavaScript page that makes a call to certain methods. When an affected browser is used to view the malformed page, the Java Virtual Machine will crash, resulting in a denial-of-service condition.
Exploit / POC
Multiple Vendor Web Browser LiveConnect JavaScript Denial Of Service Vulnerability
The following proof of concept was provided:
<script language="Javascript">
t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
</script>
The following proof of concept was provided:
<script language="Javascript">
t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
</script>
Solution / Fix
Multiple Vendor Web Browser LiveConnect JavaScript Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
Multiple Vendor Web Browser LiveConnect JavaScript Denial Of Service Vulnerability
References:
References:
- Netscape and Opera crash via java (Marc Schoenefeld
- Re: Netscape and Opera crash via java ("Wayne D. Hoxsie Jr."
- Re: Netscape and Opera crash via java (Mischa Krilov