OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
AW: [Full-Disclosure] Firefox 0.92 DoS via TinyBMP

From: Webmaster (webmasterdomina-chantal.de)
Date: Mon Jul 12 2004 - 07:53:37 CDT


Hi,

i can confirm it for FF 0.92 on afully Patched WindowsBox...

but it doesn't happen much...memory increases to 1,8GB but the Pc is still
acting normal, nothing is slowed down or something...

just closed it and the memory goes back to normal...

Grettings,
-Ron

-----Ursprungliche Nachricht-----
Von: full-disclosure-adminlists.netsys.com
[mailto:full-disclosure-adminlists.netsys.com]Im Auftrag von
thE_iNviNciblE
Gesendet: Montag, 12. Juli 2004 13:24
An: Full-Disclosurelists.netsys.com
Betreff: [Full-Disclosure] Firefox 0.92 DoS via TinyBMP

Hi,

there is a security vulnerability in Firebox 0.92 (latest Version)

http://www.4rman.com/exploits/tinybmp.htm

this link causes that your virutal memory will be rise up 1,2 GB used
Memory...

maybe Thunderbird 0.72 is also vulnerable via HTML.

credits to: StupidWhiteMan

--
   Best Regard thE_iNviNciblE
   ---------------------------
   Wissen ist Macht

Freie Meinung: http://www.your-mind-is-free.de.vu
IT-Security : http://www.kid2elite.de.vu
IT-Forum : http://www.security-focus.de.vu

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html