Tag: Security, Security / Home

Security

NAVIGATION
CATEGORIES
REFERRENCE
LINKS
Home » Security

  • Flaw in Firefox 2.0 RC2

    10 answers - 71 bytes - related search similar search Add To My Delicious Add To My Stumble Upon Add To My Google Mark Add To My Facebook Add To My Digg Add To My Reddit


    this exploit still works with the latest Firefox 2.0 RC3

  • No.1 | | 322 bytes | |

    Tue, 17 2006, Mike (AT) gmail (DOT) com wrote:

    this exploit still works with the latest Firefox 2.0 RC3

    also caused FFox 1.5.0.7 on S X i386 to die.

    jose nazario, ph.d. jose (AT) monkey (DOT) org
    http://monkey.org/~jose/ http://monkey.org/~jose/secnews.html
    http://www.wormblog.com/

  • No.2 | | 276 bytes | |

    10/17/06 at about 5am EST, Mike wrote:
    this exploit still works with the latest Firefox 2.0 RC3
    Later that day, Jose Nazario wrote:
    also caused FFox 1.5.0.7 on S X i386 to die.
    Also Firefox 1.5.0.7 on Windows XP Pro SP2 (English).
    -Eliah

  • No.3 | | 208 bytes | |

    Firefox 1.5.07 on CS died quite nicely too.
    Mike (AT) gmail (DOT) com wrote:
    this exploit still works with the latest Firefox 2.0 RC3
    >
    >
    >

  • No.4 | | 305 bytes | |

    Hello Mike,

    Tuesday, 17, 2006, 6:39:56 AM, you wrote:

    this exploit still works with the latest Firefox 2.0 RC3

    This also works on Firefox v1.5.0.7 // WinXP Pro SP2

    it's probably also worth noting that for some reason, this also clears
    windows clipboard when it crashes.

  • No.5 | | 619 bytes | |

    Tuesday, 17, 2006 18:05:22 -0400 Eliah Kagan
    <degeneracypressure (AT) gmail (DOT) comwrote:

    10/17/06 at about 5am EST, Mike wrote:
    >
    >this exploit still works with the latest Firefox 2.0 RC3
    >
    Later that day, Jose Nazario wrote:
    >also caused FFox 1.5.0.7 on S X i386 to die.
    >
    Also Firefox 1.5.0.7 on Windows XP Pro SP2 (English).

    And Firefox 1.5.0.7 on FreeBSD 6.0 RELEASE.

    Paul Schmehl (pauls (AT) utdallas (DOT) edu)
    Adjunct Information Security
    The University of Texas at Dallas

  • No.6 | | 420 bytes | |

    Eliah Kagan wrote:
    10/17/06 at about 5am EST, Mike wrote:
    >
    >this exploit still works with the latest Firefox 2.0 RC3

    Later that day, Jose Nazario wrote:
    >also caused FFox 1.5.0.7 on S X i386 to die.

    Also Firefox 1.5.0.7 on Windows XP Pro SP2 (English).
    -Eliah

    Also Firefox 1.5.0.7 and SeaMonkey 1.0.5 on x86_64.

  • No.7 | | 357 bytes | |

    Seems like the test cases trigger two different bugs. is race that
    prevents resources from being deallocated effectively and second is
    infinite recursion.

    (closed)
    (open)

    But I am not really sure.

    Ut, 2006-10-17 at 09:09 +0000, Mike (AT) gmail (DOT) com wrote:

    this exploit still works with the latest Firefox 2.0 RC3

  • No.8 | | 646 bytes | |

    Message
    From: Mike (AT) gmail (DOT) com [mailto:Mike (AT) gmail (DOT) com]
    Sent: Tuesday, 17, 2006 2:10 AM
    To: bugtraq (AT) securityfocus (DOT) com
    Subject: Flaw in Firefox 2.0 RC2

    this exploit still works with the latest Firefox 2.0 RC3

    Hmmm after a quickie check of the website IE 7.0.5600.16384 i386 on
    Windows Vista x64 also went down. The x64 build of IE 7 pegged the CPU
    at 100% while the i386 build of IE 7 only hit the machine lightly.
    both browser windows appeared to cause a memory leak as the
    system required a restart to bring memory usage down to normal levels
    again.

    Sean

  • No.9 | | 507 bytes | |

    It is also affecting any browser using the Gecko rendering engine
    (gecko-1.8 at least), such as Epiphany and Galeon, and not restricted to
    'Firefox'.
    -m

    Wed, 2006-10-18 at 10:28 +1000, jm wrote:
    Firefox 1.5.07 on CS died quite nicely too.

    Mike (AT) gmail (DOT) com wrote:

    this exploit still works with the latest Firefox 2.0 RC3
    --

    PGP SIGNATURE
    Version: GnuPG v1.4.3 (GNU/Linux)

    9ZIsx0TSZxTkZBizbiWzlZ0=
    =S4cj
    PGP SIGNATURE

  • No.10 | | 644 bytes | |

    10/20/06, Jure P <pegasus (AT) nerv (DOT) eu.orgwrote:
    Thu, 19 2006 13:05:48 -0400
    Mark A Basil <mark.basil (AT) markmonitor (DOT) comwrote:
    Wed, 2006-10-18 at 10:28 +1000, jm wrote:
    Firefox 1.5.07 on CS died quite nicely too.
    Mike (AT) gmail (DOT) com wrote:

    this exploit still works with the latest Firefox 2.0 RC3
    It is also affecting any browser using the Gecko rendering engine
    (gecko-1.8 at least), such as Epiphany and Galeon, and not restricted to
    'Firefox'.
    Also renders 9.02 (build 434) on linux unresponsive at 100% cpu usage.

    Netcat 0.7.1 isn't affected on FreeBSD 7.0.

Re: Flaw in Firefox 2.0 RC2


max 4000 letters.
Your nickname that display:
In order to stop the spam: 2 + 1 =
QUESTION ON "Security"

EMSDN.COM