bugtraq - Re: rare bug in Opera 9.20 browser

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64N.0707220541160.25560@cebula>
Date: Sun, 22 Jul 2007 05:45:19 +0200 (CEST)
From: kaneda@...ater.net
To: bugtraq@...urityfocus.com
Subject: Re: rare bug in Opera 9.20 browser

On Thu, 18 Jul 2007, jplopezy@...il.com.ar wrote:

:] In this opportunity I go to you with the purpose of communicating a strange fault to them that finds in operates. It consists of creating a document in HTML and in beating a chain of characters $/(dollar, sweeps, comile) in hexadecimal serian (24 2F 22) this promouth that when trying to see the source code when lowering the bar to visualize the end of the east document promouth that the navigator fails I leave a test of concept down 
:] 

Its not exactly but some similars to "opera null byte display":

http://sla.ckers.org/forum/read.php?2,11896,11941#msg-11941

"
I've just noticed this, when you use Opera internal Source code viewer, it 
fails to display the whole html code if the page contains a NULL (0x00) 
char. Its not a big deal, but it can be abussed to hide evil javascript 
code for Opera users. I've just tested this in Opera for Windows. :] :] I 
leave a test of concept down :] "

On Linux it works too...

What is interesting, Opera fix this few months ago and now they again 
add this "future" to the software ;]

Kanedaaa

-- 
[][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]..
[+] You can take our lives,but you will never take our Freedom - W.Wallace
[+] Peace on earth depends on the peace in the peoples hearts - Dalai Lama
[+] Revolution the only solution - System of a down...
[+] Dalej idac dalej dojdziesz dalej siedzac dalej siedzisz - etoe aka ok0
[-] Kanedaaa... Bohateur... Cucumber Team Member...     kaneda@...ater.net