full-disclosure - Firefox 0.92 DoS via TinyBMP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <40F2BA14.8030401@alicampbell.org.uk>
From: fdisclosure at alicampbell.org.uk (Ali Campbell)
Subject: Firefox 0.92 DoS  via TinyBMP

Just for the record, this caused 2.7 gigabyte virtual memory usage on a 
PowerBook running OS X / Firefox 0.9, so it's not a x86 only issue.

thE_iNviNciblE wrote:

> Hi,
> 
> there is a security vulnerability in Firebox 0.92 (latest Version)
> 
> http://www.4rman.com/exploits/tinybmp.htm
> 
> this link causes that your virutal memory will be rise up 1,2 GB used 
> Memory...
> 
> maybe Thunderbird 0.72 is also vulnerable via HTML.
> 
> credits to: StupidWhiteMan
>