PDA

Bekijk Volledige Versie : Re: Mozilla Firefox 2.0 denial of service vulnerability



Jeroen Massar
04/01/07, 19:53
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig42CE2078FB7FB7F9E6B08D79
Content-Type: text/plain; charset=ISO-8859-2
Content-Transfer-Encoding: quoted-printable

sapheal@hack.pl wrote:
> PoC exploit:
[..]

Wow you can program recursive functions! Congrats!

But that is only recursive loop, just close the page and it is done.
There are literally loads of these kind of problems in both Firefox and
IE and quite likely most other browsers.

There is a much funnier bug though, and just for the fun of it, and in
the hope that some Mozilla folks get annoyed by it and maybe fix it
after it was reported 6 years ago:

https://bugzilla.mozilla.org/show_bug.cgi?id=3D59314

Reported: 2000-11-06 17:11 PST
Severity: critical
Priority: P3
Target Milestone: Future
Version: Trunk
Hardware: All
OS: All

Yep, it will be fixed in _the future_ ;)

The fun of this bugger is that if you have say 20 tabs open that you
can't swap tabs back. Thus you end up killing the process, loosing all
of them. A lot of fun when you where googling for something and opening
a lot of windows.

Greets,
Jeroen



--------------enig42CE2078FB7FB7F9E6B08D79
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)
Comment: Jeroen Massar / http://unfix.org/~jeroen/

iHUEARECADUFAkWZcEcuFIAAAAAAFQAQcGthLWFkZHJlc3NAZ2 51cGcub3JnamVy
b2VuQHVuZml4Lm9yZwAKCRApqihSMz58IxwbAJ9MXohJ9aJJj3 nF0fNM3H9mXh5K
8ACgiyXlfsC5hiQVraR8eFjbI0RMFEU=
=25TA
-----END PGP SIGNATURE-----

--------------enig42CE2078FB7FB7F9E6B08D79--