full-disclosure - Firefox 0.92 DoS via TinyBMP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200407121752.i6CHqeu24229@netsys.com>
From: jorge.a.orchilles at thebsp.com (Jorge A. Orchilles)
Subject: Firefox 0.92 DoS  via TinyBMP

Running Windows XP SP1 fully patched. Mozilla Firefox 0.9.2 opened the page
immediately and spiked my memory over 900MB. My computer was still usable
and I was able to easily shut down Firefox. When opening the same link with
IE 6.0.2800.1106.xpsp2.030618-0119 it took about 10 minutes to load the
page, spiked my memory above 900mb while making my computer unusable until I
was able to shut IE down (which took about 30 seconds). I run an AMD Athlon
1.33Ghz 512RAM.

I believe the problem is not the browser. I will try the same link on other
browsers shortly. Might be the OS or just these two browsers.

Jorge A. Orchilles
Computer Consultant
The Business Strategy Partners, Inc
2900 Glades Circle Suite A-400
Weston, Fl 33327
Tel: (954) 385-2382 
Fax: (954) 385-2086
Cell: (954) 554-1487

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040712/91dcfc99/attachment.html