bugtraq - Re: Crash Mozilla 1.5

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Pine.A41.4.44.0309060415340.73678-100000@zivunix.uni-muenster.de>
Date: Sat, 6 Sep 2003 04:18:08 +0200 (MES)
From: Marc Schoenefeld <schonef@...-muenster.de>
To: Stephen Samuel <samuel@...reen.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Crash Mozilla 1.5


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
 I posted it to bugzilla in March 2003
 http://bugzilla.mozilla.org/show_bug.cgi?id=199694

 There was short discussion activity refering this
 bug but obviously no real problem solving.
Marc

On Fri, 5 Sep 2003, Stephen Samuel wrote:

> Date: Fri, 05 Sep 2003 15:45:28 -0700
> From: Stephen Samuel <samuel@...reen.com>
> To: Marc Schoenefeld <schonef@...-muenster.de>
> Cc: bugtraq@...urityfocus.com
> Subject: Re: Crash Mozilla 1.5
>
> Did you try posting it to bugzilla???
> just click on the big "M", and scroll down to "for testers".
>
> Or just use this URL.
> http://bugzilla.mozilla.org/enter_bug.cgi
>
>
> Marc Schoenefeld wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Hi,
> >
> >  seems like Mozilla is not interested in fixing bugs,
> >  the exploit I posted in March to bugtraq (described in
> >  http://www.mail-archive.com/bugtraq@securityfocus.com/msg11430.html),
> >  still crashes the actual version 1.4 of the Mozilla Browser:
> >  My version is Gecko/20030624 with Java 1.4.2
> >  The exploit code is:
> >  (scr1pt language="Javascript")
> >   t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
> >  (/scr1pt)
> >
> >  Cheers
> >  Marc
> >
> > - --
> >
> > Never be afraid to try something new. Remember, amateurs built the
> > ark; professionals built the Titanic. -- Anonymous
> >
> > Marc Schönefeld Dipl. Wirtsch.-Inf. / Software Developer
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.0.6 (AIX)
> > Comment: For info see http://www.gnupg.org
> >
> > iD8DBQE/WMyJqCaQvrKNUNQRAkdpAJ9WRQi4u4gilbmzQb9mZNqAowhl+wCdHklB
> > 73WM+1VxoimLo7EkXxUdIkY=
> > =PNjP
> > -----END PGP SIGNATURE-----
> >
>
>
> --
> Stephen Samuel +1(604)876-0426                samuel@...reen.com
> 		   http://www.bcgreen.com/~samuel/
>     Powerful committed communication. Transformation touching
>         the jewel within each person and bring it to life.
>
>

- --

Never be afraid to try something new. Remember, amateurs built the
ark; professionals built the Titanic. -- Anonymous

Marc Schönefeld Dipl. Wirtsch.-Inf. / Software Developer
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (AIX)
Comment: For info see http://www.gnupg.org

iD8DBQE/WUPjqCaQvrKNUNQRAqBIAJ911NlfNuet/39IYHMLjxDsgetvEwCfeQMZ
Afw26imaU9ij9l+fqIWX0gc=
=/UQG
-----END PGP SIGNATURE-----