From: tommy (tommysecurity-protocols.com)
Date: Mon Oct 30 2006 - 20:49:33 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

You can test it out here if you want:

http://security-protocols.com/poc/ff2_death.html

Here is what I get on OS X with the latest build of ff2

Program received signal EXC_BAD_ACCESS, Could not access memory.
Reason: KERN_PROTECTION_FAILURE at address: 0x00000004
0x001ea16b in nsParser::ParseFragment ()
(gdb) bt
#0 0x001ea16b in nsParser::ParseFragment ()
#1 0x00101748 in nsRange::CreateContextualFragment ()
#2 0x0185d98d in XPTC_InvokeByIndex ()
#3 0x0038ccfb in XPCWrappedNative::CallMethod ()

-- Tom

Matthew Flaschen wrote:
> Maybe I'm copying it out wrong. Seems unlikely, but can someone who got
> it to "work" (crash) upload it somewhere for a more standardized test?
>
> Matt Flaschen
>
> Ozan Ozkara wrote:
>
>> it works perfect on linux
>>
>> On Mon, 2006-10-30 at 11:38 -0500, Matthew Flaschen wrote:
>>
>>> Nothing happens when I load it in Firefox 2.0 on Windows XP.
>>>
>>> Matthew Flaschen
>>>
>>> Carlos Barros wrote:
>>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]