uhh hi
The Comodo Browser is vulnerable to window object based denial of
service attack. The brave browser fails to sanitize a check when window.close()
function is called in number of dynamically generated events… The
function is called in a suppressed manner and kills the parent window
directly by default which makes it vulnerable to denial of service attack.
Window.close() should be sanitized i don’t know why its being not implemented here
most of the browsers i tested Edge/Firefox is sanitizing the call and doesn’t allow / displays a popup when window.close() call is made
Following url with the html file can be sent to a victim
/*
Lottery.Comodo Browser
Proof of Concept
Click the below link to Trigger the Vulnerability..
THIS WAS A TEST */
There must be a parent window confirmation check prior to close of window.
Tested : Latest Comodo Browser
Windows 10 x64
This should apply to all platforms tho :P0l
