Re: DoS_Browser

From: Knud Erik Højgaard (kainat_private)
Date: Wed Jun 27 2001 - 11:55:10 PDT

Previous message: mixterat_private: "Intrusion Automation"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

From: "Elan Hasson" <elanat_private>
Sent: Thursday, June 27, 2002 6:20 PM
Subject: RE: DoS_Browser
> That's not a DoS!
>
> There was a thread about this earlier..Its just an infinate loop that does
a
> bit of color changing.

But since the browser doesn't limite the resources used in the infinite loop
it causes the browser to hang/become unresponsive, thereby causing a Denial
of Service condition. Much like an infinite frame loop[1] or similar
stuff[2]

[1] http://quake.mobilixnet.dk (funny, 1 document cant loop back to itself,
but deeper levels arent checked in IE (macromedia dreamweaver (a html
editor) handles it fine and dandy with a warning about a recursive
frameset))

[2] <script>while(true) alert('this is an annoying dialog)</script>

-Knud

Previous message: mixterat_private: "Intrusion Automation"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Jun 28 2002 - 10:25:55 PDT