lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Tue, 11 Jul 2006 15:35:46 +0200
From: reywen@...il.com
To: bugtraq@...urityfocus.com
Subject: crashing firefox <= 1.5.0.4

hi,

We send any file by the form with ENCTYPE="multipart/form-data"
and method="POST" when file upload successful try refresh page (F5 or
refresh button).

steps:
1) upload file by form
2) refresh page
3) firefox crash

example code:

<form action="" ENCTYPE="multipart/form-data" method="POST">
        file name:<input type="file" name="filee">
        <input type="submit">
</form>

P.S. it works with html and php code.

-- 
reyw//[HTB Team]

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ