full-disclosure - Re: Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <200702252052.16846.ismail@pardus.org.tr>
Date: Sun, 25 Feb 2007 20:52:16 +0200
From: Ismail Dönmez <ismail@...dus.org.tr>
To: "Stan Bubrouski" <stan.bubrouski@...il.com>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
	security@...illa.org
Subject: Re: Firefox onUnload + document.write() memory
	corruption vulnerability (MSIE7 null ptr)

On Sunday 25 February 2007 20:47:22 Stan Bubrouski wrote:
> I can't say the same it shoots my CPU up to 100% and is completely
> unresponsive on win2k sp4.

If it doesn't crash the original vulnerability no longer exists, there are 
many sites on the web that will freeze your Firefox and chew up all the CPU.

-- 
Ismail Donmez ismail (at) pardus.org.tr
GPG Fingerprint: 7ACD 5836 7827 5598 D721 DF0D 1A9D 257A 5B88 F54C
Pardus Linux / KDE developer

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/