full-disclosure - Firefox 0.92 DoS via TinyBMP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <OFFD1E703F.6B37B6B3-ON88256ECF.005FCAC1-88256ECF.00601ED0@symantec.com>
From: pferrie at symantec.com (Peter Ferrie)
Subject: Firefox 0.92 DoS  via TinyBMP

>Anyone have any clues as to why my machine seems vunerable to it?

Yes.  Look in the file and you'll see that it is a ~1Mb wide 24-bit
colour bitmap.  That's going to take a lot of memory when there are
several of them (as in that example).

8^) p.