full-disclosure - AW: Firefox 0.92 DoS via TinyBMP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <NJEPLPPCPOOEFLGODKEEAEFGDBAA.webmaster@domina-chantal.de>
From: webmaster at domina-chantal.de (Webmaster)
Subject: AW: Firefox 0.92 DoS  via TinyBMP

Hi,

i can confirm it for FF 0.92 on afully Patched WindowsBox...

but it doesn't happen much...memory increases to 1,8GB but the Pc is still
acting normal, nothing is slowed down or something...

just closed it and the memory goes back to normal...

Grettings,
-Ron

-----Ursprungliche Nachricht-----
Von: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com]Im Auftrag von
thE_iNviNciblE
Gesendet: Montag, 12. Juli 2004 13:24
An: Full-Disclosure@...ts.netsys.com
Betreff: [Full-Disclosure] Firefox 0.92 DoS via TinyBMP

Hi,

there is a security vulnerability in Firebox 0.92 (latest Version)

http://www.4rman.com/exploits/tinybmp.htm

this link causes that your virutal memory will be rise up 1,2 GB used
Memory...

maybe Thunderbird 0.72 is also vulnerable via HTML.

credits to: StupidWhiteMan

--
   Best Regard thE_iNviNciblE
   ---------------------------
   Wissen ist Macht

Freie Meinung: http://www.your-mind-is-free.de.vu
IT-Security  : http://www.kid2elite.de.vu
IT-Forum     : http://www.security-focus.de.vu

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html