Re: Fire fox dos exploit
On Wed, 31 May 2006, Josh Zlatin-Amishav wrote:
Can you give us some more details, like versions and platforms affected? I
was unable to recreate this flaw using firefox 1.5.dfsg+1.5.0 on Debian
unstable.
The word-wrapping of his mail client broke the exploit. If you clean that
up by only putting line-breaks between tags, it seems to work. Try:
http://static.die.net/firefox-marquee-dos/
This breaks Firefox/1.5.0.3 on Ubuntu 5.0.4 and WinXP, and Firefox/1.5.0.2
on Ubuntu 5.1.0. The browser freezes and on Linux the window stops
repainting.
-- Aaron