bugtraq - Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <4A1D1C77.1761.009C.3@dot.state.tx.us>
Date: Wed, 27 May 2009 10:56:56 -0500
From: "Jim Parkhurst" <JPARKHUR@....state.tx.us>
To: <cert@...t.org>, <info@...cl.etat.lu>,
	"full-disclosure" <full-disclosure@...ts.grok.org.uk>,
	<cve@...re.org>, <nvd@...t.gov>, <vuln@...unia.com>,
	"bugtraq" <bugtraq@...urityfocus.com>,
	"Thierry Zoller" <Thierry@...ler.lu>
Subject: Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service
	through unclamped loop (SVG)

If I understand the process, saving the text at [IV. Proof of concept] (following the "~~~..." to an .XHTML file, and launch the file using Firefox, I should lose functionality ("Browser doesn't respond any longer to any user input, all tabs are no longer accessible, your work if any  (hail to the web 2.0) might be lost.")

Using FF2.0.0.20 and the file does not result in loss of use. All tabs are functional. All JAVA links continue function.  Same result for naming the POC file to .HTML, .HTM.

>>> Thierry Zoller <Thierry@...ler.lu> 05/26/2009 13:13 >>>

For  those that failed to reproduce, try naming the POC file with an XHTML
extension.