RE: [Full-Disclosure] safari dos

2003-11-23 Thread Grant Husbands
I wrote: > b='';a="b=b+' ';" > for (var i=0;i<15;++i) a+=a; > // Above line creates a 64MB script > // Now run the 64MB script, 100,000 times > for (var i=0;i<10;++i) eval(a); Just a quick note; I had altered the script without updating the comments. It only creates a 256KB script, now; a long

Re: [Full-Disclosure] safari dos

2003-11-23 Thread Grant Husbands
[EMAIL PROTECTED] wrote: > Original is here: > http://www.insecure.ws/article.php?story=20031122012748282 > > > Safari will never exit a loop in javascript. Since javascript isn't > executed in a thread, this cause a DoS (Safari crashes). It should be noted that it's relatively easy to DoS most

Re: [Full-Disclosure] safari dos

2003-11-22 Thread Christian Horchert
Am 23.11.2003 um 03:10 schrieb [EMAIL PROTECTED]: Am 22.11.2003 um 01:58 schrieb [EMAIL PROTECTED]: A very simple javascript block like this one: while (true) { document.location "sherlock://com.apple.movies?" } or just shorter while(1){} Ahaha, I'm not sure that it makes a very significant cha

Re: [Full-Disclosure] safari dos

2003-11-22 Thread [EMAIL PROTECTED]
Christian Horchert wrote: Am 22.11.2003 um 01:58 schrieb [EMAIL PROTECTED]: A very simple javascript block like this one: while (true) { document.location "sherlock://com.apple.movies?" } or just shorter while(1){} Christian Ahaha, I'm not sure that it makes a very significant change :) p

Re: [Full-Disclosure] safari dos

2003-11-22 Thread Christian Horchert
Am 22.11.2003 um 01:58 schrieb [EMAIL PROTECTED]: A very simple javascript block like this one: while (true) { document.location "sherlock://com.apple.movies?" } or just shorter while(1){} Christian ___ Full-Disclosure - We believe in it. Charter: ht

Re: [Full-Disclosure] safari dos

2003-11-22 Thread Christian Horchert
Am 22.11.2003 um 01:58 schrieb [EMAIL PROTECTED]: Original is here: http://www.insecure.ws/article.php?story=20031122012748282 Safari will never exit a loop in javascript. Since javascript isn't executed in a thread, this cause a DoS (Safari crashes). Firebird has been tested and is not vulnerab

Re: [Full-Disclosure] safari dos

2003-11-22 Thread [EMAIL PROTECTED]
Christian Horchert wrote: Am 22.11.2003 um 01:58 schrieb [EMAIL PROTECTED]: Original is here: http://www.insecure.ws/article.php?story=20031122012748282 Safari will never exit a loop in javascript. Since javascript isn't executed in a thread, this cause a DoS (Safari crashes). Firebird has be

Re: [Full-Disclosure] safari dos

2003-11-21 Thread Christian Horchert
Am 22.11.2003 um 01:58 schrieb [EMAIL PROTECTED]: Original is here: http://www.insecure.ws/article.php?story=20031122012748282 Safari will never exit a loop in javascript. Since javascript isn't executed in a thread, this cause a DoS (Safari crashes). Firebird has been tested and is not vulnerab