Full Disclosure mailing list archives

Re: magic trick ... voila 100% cpu


From: kf_lists <kf_lists () secnetops com>
Date: Wed, 11 Aug 2004 04:55:13 -0700

The JavaScript is supposed to open up the M$ office assistant (the wizard)... make him act surprised and then have him crash your web browser due to the very long line of text he is trying to "say".

On windows boxen this should cause agentsvr.exe to take up 100% of the CPU...

I have only been able to test TB 0.6 (20040503) on Suse 9.1 in regards to the X windows crash... I had no luck reproducing it.

Anyone else having X crashes because of this?
-KF


whatever the JS code in your attachement does - at least it crashes my
Mozilla Thunderbird (version 0.7.1 (20040715)) when i tries to display
the attachment inline. oh, not only TB crashes, but my Gnome display
manager crashes too and takes the whole X11 session down:

gconfd (evil-8530): Signal 15 received, shutdown
gdm[8021]: gdm_slave_xioerror_handler: heavy X-error - :0 will be restarted
(messages appear in german here, "translated" for the list)

this is debian/unstable, linux 2.6.8-rc4 (latest -BK), gdm is version
2.6.0.3, XFree86-4.3.0. i guess it's time to bugzilla something....

Thanks,
Christian.
--
BOFH excuse #266:

All of the packets are empty.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html





_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: