bugtraq - Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 1 Mar 2005 08:17:05 GMT
From: dveditz@...zio.com
To: bugtraq@...urityfocus.com, vulnwatch@...nwatch.org
Subject: Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error


> Quoting iDEFENSE Labs <labs-no-reply@...fense.com>:
> 
> > iDEFENSE Labs have confirmed The Mozilla Organization's Mozilla 1.7.1 
> > and 1.7.3, as well as Firefox 0.10.1 are vulnerable to this
> > issue. A check on the source code for Firefox 1.0 suggests it is also
> > vulnerable. It is suspected that all previous versions of both browsers
> > are vulnerable.
> 
> Don't you mean 1.0.1 and not "0.10.1" as the vulnerable version of Firefox?

No, they meant 0.10.1, the Firefox Preview Release from last fall. Firefox 1.0.1
contains a fix (as will Mozilla 1.7.6) and has just been released.

-Dan Veditz
Mozilla Security
Group