full-disclosure - Firefox 0.92 DoS via TinyBMP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: pid4x at dodo.com.au (Philip)
Subject: Firefox 0.92 DoS  via TinyBMP

It caused the same effect on fully patched XP SP1 (according to
windowsupdate.com) with  IE6.0.2800.1106.xpsp2.030422-1633 when using MyIE
(virutal memory low warning) untill i closed the tab, when opening the link
in just IE page file got to over 900mb before i ended IE's task.

Anyone have any clues as to why my machine seems vunerable to it?

----- Original Message ----- 
From: "thE_iNviNciblE" <the_invincible@....de>
To: <Full-Disclosure@...ts.netsys.com>
Sent: Monday, July 12, 2004 9:23 PM
Subject: [Full-Disclosure] Firefox 0.92 DoS via TinyBMP


> Hi,
>
> there is a security vulnerability in Firebox 0.92 (latest Version)
>
> http://www.4rman.com/exploits/tinybmp.htm
>
> this link causes that your virutal memory will be rise up 1,2 GB used
> Memory...
>
> maybe Thunderbird 0.72 is also vulnerable via HTML.
>
> credits to: StupidWhiteMan
>
> -- 
>    Best Regard thE_iNviNciblE
>    ---------------------------
>    Wissen ist Macht
>
> Freie Meinung: http://www.your-mind-is-free.de.vu
> IT-Security  : http://www.kid2elite.de.vu
> IT-Forum     : http://www.security-focus.de.vu
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>