lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 11 Mar 2007 22:09:18 +0100
From: endrazine <endrazine@...il.com>
To: Mihai Dontu <mihai.dontu@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: firefox 2.0.0.2 crash

Mihai Dontu a écrit :
> On Friday 09 March 2007 20:31, Tõnu Samuel wrote:
>   
>> Can be dupe but in fast browsing over topics I did not discovered this
>> exploit:
>>
>> http://people.zoy.org/~sam/firefox-crash-save-session-before-clicking.gif
>>     

Makes gimp 2.2.12 segfault.

endrazine@...alhost ~/firefox.crash $ gimp 
./firefox-crash-save-session-before-clicking.gif
GIF: too much input data, ignoring extra...
GIF: bogus character 0x00, ignoring.
GIF: too much input data, ignoring extra...
GIF: bogus character 0x00, ignoring.
GIF: bogus character 0x23, ignoring.
GIF: bogus character 0xf9, ignoring.
GIF: bogus character 0x04, ignoring.
GIF: bogus character 0x05, ignoring.
GIF: bogus character 0x0a, ignoring.
GIF: bogus character 0x00, ignoring.
GIF: bogus character 0x0e, ignoring.
GIF: bogus character 0x00, ignoring.

(gifload:8687): LibGimp-CRITICAL **: gimp_drawable_get: assertion `width 
 > 0 && height > 0 && bpp > 0' failed
/usr/lib/gimp/2.0/plug-ins/gifload: fatal error: Erreur de segmentation
endrazine@...alhost ~/firefox.crash $


Cheers,

endrazine



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ