Re: Flaw in Firefox 2.0 RC2

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Flaw in Firefox 2.0 RC2
From: "Eliah Kagan" <degeneracypressure@xxxxxxxxx>
Date: Tue, 17 Oct 2006 18:05:22 -0400
Cc: Mike@xxxxxxxxx
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ET7AuCV58YYxysJOzNjS7mGDpF31DjBDJqvaAI67sv+kPF2fLVHstZlNmzqviNT+QVQsMFNFb9njFeV/vWqxrgFpu5tCgVBXuncwtMcK04TVJ/DY+vCdxQTsp1PJcblTrVmu1HsHdReEhHpTYdCmqFOfc4vTXe3pRmKVtnnn4go=
In-reply-to: <Pine.BSO.4.64.0610171445380.14444@xxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20061017090956.32747.qmail@xxxxxxxxxxxxxxxxx> <Pine.BSO.4.64.0610171445380.14444@xxxxxxxxxxxxxxxx>

On 10/17/06 at about 5am EST, Mike wrote:

http://lcamtuf.coredump.cx/ffoxdie.html
this exploit still works with the latest Firefox 2.0 RC3


Later that day, Jose Nazario wrote:

also caused FFox 1.5.0.7 on OS X i386 to die.


Also Firefox 1.5.0.7 on Windows XP Pro SP2 (English).

-Eliah

Follow-Ups:
- Re: Flaw in Firefox 2.0 RC2
  - From: arny
- Re: Flaw in Firefox 2.0 RC2
  - From: Paul Schmehl

References:
- Flaw in Firefox 2.0 RC2
  - From: Mike
- Re: Flaw in Firefox 2.0 RC2
  - From: Jose Nazario