<<< Date Index >>>     <<< Thread Index >>>

Re: Fire fox dos exploit



On Wed, 31 May 2006, Josh Zlatin-Amishav wrote:

Can you give us some more details, like versions and platforms affected? I was unable to recreate this flaw using firefox 1.5.dfsg+1.5.0 on Debian unstable.

The word-wrapping of his mail client broke the exploit.  If you clean that
up by only putting line-breaks between tags, it seems to work.  Try:

        http://static.die.net/firefox-marquee-dos/

This breaks Firefox/1.5.0.3 on Ubuntu 5.0.4 and WinXP, and Firefox/1.5.0.2
on Ubuntu 5.1.0.  The browser freezes and on Linux the window stops
repainting.

                                    -- Aaron