CVE-2009-1828
Firefox - Denial of Service via KEYGEN Element with Automatic Refresh
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-1828. PoCs published by Thierry Zoller.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service (DoS) vulnerability in Firefox by leveraging the KEYGEN tag to create an endless loop when combined with a JavaScript onload event. The loop causes the browser to become unresponsive and leak memory.
Description
Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1) a META element specifying automatic page refresh or (2) a JavaScript onLoad event handler for a BODY element. NOTE: it was later reported that earlier versions are also affected.
Exploits (1)
This exploit demonstrates a denial-of-service (DoS) vulnerability in Firefox by leveraging the KEYGEN tag to create an endless loop when combined with a JavaScript onload event. The loop causes the browser to become unresponsive and leak memory.