full-disclosure - Firefox 0.92 DoS via TinyBMP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: hescominsoon at emmanuelcomputerconsulting.com (William Warren)
Subject: Firefox 0.92 DoS  via TinyBMP

this made my mozilla 1.71 run slow and spiked my ram usage above 
100 megs for a seconds..but no increase in paging file 
usage..when i shutdown the tab with that link mozie worked fine.

thE_iNviNciblE wrote:

> Hi,
> 
> there is a security vulnerability in Firebox 0.92 (latest Version)
> 
> http://www.4rman.com/exploits/tinybmp.htm
> 
> this link causes that your virutal memory will be rise up 1,2 GB used 
> Memory...
> 
> maybe Thunderbird 0.72 is also vulnerable via HTML.
> 
> credits to: StupidWhiteMan
> 

-- 
My "Foundation" verse:
Isa 54:17  No weapon that is formed against thee shall prosper; 
and every tongue that shall rise against thee in judgment thou 
shalt condemn. This is the heritage of the servants of the LORD, 
and their righteousness is of me, saith the LORD.

-- carpe ductum -- "Grab the tape"