Re: [Full-disclosure] SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow

To: Bernhard Mueller <research@xxxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow
From: Thierry Zoller <Thierry@xxxxxxxxx>
Date: Thu, 13 Apr 2006 18:42:36 +0200
Cc: Full Disclosure <full-disclosure@xxxxxxxxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
In-reply-to: <443E4307.1070603@xxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization: Kachkeis Liebhaber CoKG
References: <443E4307.1070603@xxxxxxxxxxxxxxx>
Reply-to: Thierry Zoller <Thierry@xxxxxxxxx>

Dear Bernhard Mueller,

Opera is pretty bad at CSS, try the new fuzzer from HDM :
http://metasploit.com/users/hdm/tools/see-ess-ess-die/cssdie.html


-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

References:
- SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow
  - From: Bernhard Mueller

Prev by Date: Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure
Next by Date: Re: phpWebSite 0.10.? (topics.php) Remote SQL Injection Exploit
Previous by thread: SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow
Next by thread: ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow
Index(es):
- Date
- Thread