Even More Sidebar Fun!

143
vote

Okay, so I woke up this morning thinking it's a cold day today, let's dos Firefox again. This ain't unusual, so I did it. However, there is a slight difference with this one. This is a real denial of service, the exploit below manages to add a bookmark and when the bookmark is set and you click it, Firefox will not respond to ANY uri anymore. Even when you restart Firefox it is impossible to go to Google for instance. See the screenshot below. The reasons I call it a real denial of service is because browser vendors always say that a denial of service is persistent. Okay, here ya have a persistent one. The only way to regain "service" is to remove the persistent sidebarpanel, which obviously any computer noob won't know how to do. The other method is to re-install Firefox, or just switch to Opera, sorry but it's true.The payload below isn't the exact one of the screenshot, your mileage may vary on that one because it takes up too much blogspace, and it bores me too quickly. A good thing I had BrowserFry which made me launch it from 0 to 100 in 2 seconds, beat that one Ferrari! screenshot


Trackback URL for this post:

http://www.secgeeks.com/trackback/1133