TUCoPS :: Browsers :: opera.txt

Opera 3.21 can be crashed with an invalid URL.

[ http://www.rootshell.com/ ]

Date:         Fri, 14 Aug 1998 09:54:09 +0800
From:         "Zac Leow C.H" <zac@BIC.NUS.EDU.SG>
Subject:      URL exploit to crash Opera Browser

By putting an extra slash at the end of http:// tag will crash your opera
browser. Tested on version 3.21


Seems to be save on Netscape and MSIE, they just generate an error message. ftp:/// tag does not crash any of the browsers.

OPERA caused an invalid page fault in
module OPERA.EXE at 015f:004c5476.
EAX=00003a3a CS=015f EIP=004c5476 EFLGS=00010206
EBX=3a3a3a3a SS=0167 ESP=0077f0a4 EBP=0077f0cc
ECX=0000002f DS=0167 ESI=013ada80 FS=129f
EDX=00000000 ES=0167 EDI=013ada8c GS=0000
Bytes at CS:EIP:
8b 0a bf ff fe fe 7e 8b c1 8b f7 33 cb 03 f0 03
Stack dump:
013ada80 013ada8c 00000000 0044391b 00000000 0000003a 013ad9f0 013ad740 00000000 00000000 0077f558 0048a4fd 013a8b20 00000000 011c136c bff51f90

Zac "BugTrakker" Leow (R & D Engineer)
BioInformatics Centre (Singapore)
Opinions expressed herein are my own and may not represent those of my employer.

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH