full-disclosure - Mozilla Firefox "Host:" Buffer Overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri Sep  9 16:59:47 2005
From: larry at larryseltzer.com (Larry Seltzer)
Subject: Mozilla Firefox "Host:" Buffer Overflow

>>I could neither find it but it appears same to
https://bugzilla.mozilla.org/show_bug.cgi?id=267669. Maybe he uses mangleme
also? Also I want to know from where he copied Technical Details? Maybe it
just crash 0xadc2adc2 only is kernel space.

This does look funny. Clearly the two reports have a lot in common, but they
aren't precisely the same. The new report has this as a POC: 

&lt;A HREF=https:--------------------------------------------- &gt;

The old report has this as a crash page:

&lt;a href="http://------------------" &gt;

Can anyone tell from the details of the bugzilla if the differences affect
the bug? Is it possible the old bug was reintroduced in newer versions?

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blog.ziffdavis.com/seltzer
Contributing Editor, PC Magazine
larryseltzer@...fdavis.com