full-disclosure - Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 27 May 2009 19:49:58 +0100
From: Stuart Dunkeld <burningcows@...il.com>
To: Thierry Zoller <Thierry@...ler.lu>
Cc: full-disclosure <full-disclosure@...ts.grok.org.uk>,
	Jim Parkhurst <JPARKHUR@....state.tx.us>
Subject: Re: Addendum : [TZO-26-2009] Firefox (all?)
	Denial of Service through unclamped loop (SVG)

On Wed, May 27, 2009 at 7:38 PM, Thierry Zoller <Thierry@...ler.lu> wrote:
> Hi Jim,
>
> Read again:
> Affected : All Firefox versions that support SVG.
>
> Then think about what version of Firefox you are using.

SVG (including circle) was originally implemented in Firefox 1.5 -
https://developer.mozilla.org/en/SVG_in_Firefox_1.5

--stuart

JP> Using FF2.0.0.20 and the file does not result in loss of use.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/