Re: Concurrency-related vulnerabilities in browsers - expect problems

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Concurrency-related vulnerabilities in browsers - expect problems
From: "Nick Boyce" <nick.boyce@xxxxxxxxx>
Date: Fri, 6 Oct 2006 14:56:47 +0100
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=miQpiJhPn9GJRUQZY5OjC1yxidnAgBafrYJqrPDA2WPIHvIFTJojJZCqrnxkwKh9C8oVJ8WShDy/v8bG3nNHA71h18/xZgfUdEVos/hnWmAlZcq/9wG1J1f0OG8TnNqGC8MzDlIx2fOpwwth4GgKTs3Yx0R3P+wtrRugChF9tKo=
In-reply-to: <20061005054523.24055.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20061005054523.24055.qmail@xxxxxxxxxxxxxxxxx>

On 5 Oct 2006 05:45:23 -0000, Mike@xxxxxxxxx <Mike@xxxxxxxxx> wrote:

http://lcamtuf.coredump.cx/ffoxdie.html
this exploit still works with the latest Firefox 1.5.0.7 and Firefox 2.0 RC1


FWIW, I confirm it also works on Seamonkey 1.0.5 on WinXP.

Nick Boyce
--
Will no one rid me of this troublesome chair ?

References:
- Re: Concurrency-related vulnerabilities in browsers - expect problems
  - From: Mike