bugtraq - Re: Mozilla Firefox (tested on 0.9.3) html-code crash.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20041029104413.G36947@dekadens.coredump.cx>
Date: Fri, 29 Oct 2004 10:46:23 +0200 (CEST)
From: Michal Zalewski <lcamtuf@...edump.cx>
To: ducch apple <admin@...oyfam.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Mozilla Firefox (tested on 0.9.3) html-code crash.

On Mon, 25 Oct 2004, ducch apple wrote:

> Viewing a page with the content:
>
> <HTML><INPUT^@...AAAAAAA>
>
> Would cause Firefox to crash.

Indeed (note that ^@ stands for character 0x00). This happens to be a
carbon copy of one of the test cases I posted a while ago in the "Web
browsers - a mini farce" thread. This very problem is already fixed in
nightly builds of Mozilla for quite a while.

You probably should either attribute it properly, or refrain from
re-posting problems reported just days ago altogether...

-- 
------------------------- bash$ :(){ :|:&};: --
 Michal Zalewski * [http://lcamtuf.coredump.cx]
    Did you know that clones never use mirrors?
--------------------------- 2004-10-29 10:44 --

   http://lcamtuf.coredump.cx/photo/current/