I am going to do that. I have also posted it to bugtraq but I do not think he
will post it. He has not posted any exploits I have found. :(
James
-----Original Message-----
From: Civileme [SMTP:[EMAIL PROTECTED]]
Sent: Monday, July 12, 1999 5:22 AM
To: [EMAIL PROTECTED]
Subject: Re: [expert] Java Exploit II
Yes, it can be nasty. Send it to the folks at www.insecure.org for posting if
Netscape and Microsoft don't respond. The only way we usually get them to move
on
exploits is to post it where malicious people can get it and use it.
MSIE (All versions) has exploits that include stealing files and even running
arbitrary commands, all based on overflows. The only version I know that
avoids
these exploits is the MSIE workalike someone coded (why?) for Linux.
Civileme
"James J. Capone" wrote:
> Also try adding
>
> parent.open();parent.open();parent.close()
>
> About 100 times. Will cause the computer to crash big time.
>
> I have emailed M$ and Netscape about the problem..
>
> James
>
> -----Original Message-----
> From: James J. Capone [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, July 12, 1999 2:03 AM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [expert] Java Exploit II
>
> Yeah that one sucks. I know it all to well. There is also a overflow bug that
> will open 1000+ child windows within 1 second. and when they are closed they
> open 1000+ child windows. etc... So it would never end.
>
> James J. Capone
> =======================
> Webmaster http://linuxuser.8m.com
> Asst. Webmaster http://www.ptm.com
> Co-Author - Linux Book For Newbies.
> "The Only Person To Hear Both Sides Of A Argument Is The Guy In The Apartment
> Next To Yours!"
>
> -----Original Message-----
> From: Axalon [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, July 12, 1999 1:42 AM
> To: '[EMAIL PROTECTED]'
> Subject: Re: [expert] Java Exploit II
>
> Theres another one that bounces the netscape window around, really stinks
> if your running with a 1600x1200 desktop and a netscape window smaller
> than 640x480
>
> On Mon, 12 Jul 1999, James J. Capone wrote:
>
> > I found another one.. This one will allow for many many new windows to be
> open
> > and keep spawning off more windows, ect...........
> >
> >
> > This one uses a series of parent.open commands which can be linked to a
file
> > that has a series of parent.open commands also.
> >
> >
> > This is located at http://linuxuser.8m.com/test2.html
> >
> > James J. Capone
> > =======================
> > Webmaster http://linuxuser.8m.com
> > Asst. Webmaster http://www.ptm.com
> > Co-Author - Linux Book For Newbies.
> > "The Only Person To Hear Both Sides Of A Argument Is The Guy In The
Apartment
> > Next To Yours!"
> >
