Just 15 lines of CSS code, you can make your iPhone crashes
Wire of Sabri Haddouche security researcher discovered a new attack, just visit includes some CSS and HTML pages, it will lead to iOS restart frozen and macOS. Windows and Linux users not affected by this error affected.
Attacks exploit -webkit-backdrop-filter CSS property weaknesses by using nested div with this attribute, you can quickly consume all the graphic resources and operating system crash or freeze.Attack do not need to enable Javascript, so it also applies to the Mail.On macOS, the performance of UI freeze.On iOS, the performance of the device is restarted.This attack affects all browsers on iOS, and macOS in Safari and Mail, because they both use WebKit rendering engine.
For those who want to see the cause of this attack, the researchers have been published on its GitHub page.
Click rawgit.Be careful when com link, because it can quickly lead to iOS crash or cause problems with Mac.
rawgit.com link:
https: // www.bleepingcomputer.com / news / security / new-css-attack-restarts-an-iphone-or-freezes-a-mac /
Code GitHub:
https: // gist.github.com / pwnsdx / ce64de2760996a6c432f06d612e33aea
GitHub open this page, you can see the code as follows:
Above the red part is through a base64 encoded picture, here is a lot of