full-disclosure - Re: Netscape 6/7 crashes by a simple stylesheet...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: raju at linux-delhi.org (Raj Mathur)
Subject: Re: Netscape 6/7 crashes by a simple stylesheet...

>>>>> "Jocke" == jux  <jux@...r.com> writes:

    Jocke> Hi, I'm new here so I don't know if I posted this in the
    Jocke> correct list...

    Jocke> I've found out that some simple CSS-code can crash Netscape
    Jocke> 6 and 7.

    Jocke> This is a simple html-page containing this code:

    Jocke> <html> <body> <div style="position:absolute;">

    Jocke>  <div style="position:absolute; overflow:scroll">

    Jocke>  </div> </div> </body> </html>

    Jocke> Was this already known?

Tested on following browsers on Red Hat Linux 8.0, i386:

galeon-1.2.6-0.8.0: Consumes 100% CPU but continues to respond to
events.

kdebase-3.0.3-14 (Konqueror): No effect

mozilla-1.0.1-26: Consumes 100% CPU, stops responding to events (or
takes overly long to respond -- I didn't wait more than a couple of
minutes).

netscape-communicator-4.79-1: No effect.

Regards,

-- Raju

    Jocke> /Jocke

-- 
Raj Mathur                raju@...dalaya.org      http://kandalaya.org/
                      It is the mind that moves