bugtraq - Re: Mozilla Firefox 2.0 denial of service vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 01 Jan 2007 20:34:15 +0000
From: Jeroen Massar <jeroen@...ix.org>
To: sapheal@...k.pl
Cc: bugtraq@...urityfocus.com
Subject: Re: Mozilla Firefox 2.0 denial of service vulnerability

sapheal@...k.pl wrote:
> PoC exploit:
[..]

Wow you can program recursive functions! Congrats!

But that is only recursive loop, just close the page and it is done.
There are literally loads of these kind of problems in both Firefox and
IE and quite likely most other browsers.

There is a much funnier bug though, and just for the fun of it, and in
the hope that some Mozilla folks get annoyed by it and maybe fix it
after it was reported 6 years ago:

https://bugzilla.mozilla.org/show_bug.cgi?id=59314

Reported: 2000-11-06 17:11 PST
Severity: critical
Priority: P3
Target Milestone: Future
Version: Trunk
Hardware: All
OS: All

Yep, it will be fixed in _the future_ ;)

The fun of this bugger is that if you have say 20 tabs open that you
can't swap tabs back. Thus you end up killing the process, loosing all
of them. A lot of fun when you where googling for something and opening
a lot of windows.

Greets,
 Jeroen

Download attachment "signature.asc" of type "application/pgp-signature" (312 bytes)