full-disclosure - IE sp2 and Mozilla Firefox DoS.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: phased at mail.ru (phased)
Subject: IE sp2 and Mozilla Firefox DoS.

Probably because there is a simple solution, close the browser, end of
problem.

-----Original Message-----
From: bipin gautam <visitbipin@...oo.com>
To: full-disclosure@...ts.netsys.com
Date: Mon, 27 Dec 2004 10:24:14 -0800 (PST)
Subject: [Full-Disclosure] IE sp2 and Mozilla Firefox DoS.

> 
> There is an issue with these browser rendering html's
> with long titles. 
> Only Tested on: 
> -------------- 
> Internet Explorer(SP2): 6.0.2900.2180 
> Mozilla firefox: 1.0 
> 
> Not affected:
> ------------- 
> Mozilla Browser 
> 
> Have a look at, 
> ___________________ 
> <html> 
> <head> <title>  ....(put)3.5 MB OF data....... 
> 
> </html> 
> ___________________
>  
> 
> For IE beyond 1 Mb will just do fine. On execution,
> Mozilla Firefox starts filling up all the available
> system memory with 100% CPU use. 
> 
> Internet explorer renders 100% CPU use, but no system
> instability. (O; 
> I've tested it on Windows XP SP2. 
> 
> Both Firefox & IE supports decompression method 'gzip'
> ie. an extended request header named
> HTTP_ACCEPT_ENCODING like 
> HTTP_ACCEPT_ENCODING=gzip,deflate 
> 
> By this way, the file can be kept around few kilobytes
> in the server and delivered easily. I wonder, why
> such... simple issue went un-noticed to everyone for
> years... 
> 
> 
> 		
> __________________________________ 
> Do you Yahoo!? 
> Send holiday email and support a worthy cause. Do good. 
> http://celebrity.mail.yahoo.com
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>