HTTP: Multiple Browser Marquee DOS

This signature detects attempt to exploit a known vulnerability against multiple browsers like Mozilla, Seamonkey. The vulnerability occurs when the browser is parsing certain HTML content. A successful attacker can consume excessive CPU resources in affected browsers, denying service to legitimate users.

Extended Description

Multiple browsers are prone to a denial-of-service vulnerability when parsing certain HTML content. Successfully exploiting this issue allows attackers to consume excessive CPU resources in affected browsers, denying service to legitimate users. The following are vulnerable: Mozilla Firefox 1.5.0.3 Internet Explorer 6.0 on Microsoft Windows XP Other versions and products may also be affected.

Affected Products

Nokia n95_phone,Opera_software opera_web_browser

References

BugTraq: 18165

CVE: CVE-2006-2723

URL: http://www.securiteam.com/securitynews/5XP0215IUO.html http://www.milw0rm.com/exploits/1867

Short Name

HTTP:BROWSER:MARQUEE-TAG-DOS

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Multiple Browser Marquee DOS

Extended Description

Affected Products

References

Found a potential security threat?