RE: Flaw in Firefox 2.0 RC2

To: <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: RE: Flaw in Firefox 2.0 RC2
From: "Sean Warnock" <swarnock@xxxxxxxxxxxxxxxxxxxx>
Date: Thu, 19 Oct 2006 07:38:27 -0700
In-reply-to: <20061017090956.32747.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20061017090956.32747.qmail@xxxxxxxxxxxxxxxxx>
Thread-index: AcbyG91AcCAvOYKlS5Ctt7YILjkCMQBb5LKw
Thread-topic: Flaw in Firefox 2.0 RC2

-----Original Message-----
From: Mike@xxxxxxxxx [mailto:Mike@xxxxxxxxx] 
Sent: Tuesday, October 17, 2006 2:10 AM
To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Flaw in Firefox 2.0 RC2

http://lcamtuf.coredump.cx/ffoxdie.html
this exploit still works with the latest Firefox 2.0 RC3

Hmmm after a quickie check of the website IE 7.0.5600.16384 i386 on
Windows Vista x64 also went down.  The x64 build of IE 7 pegged the CPU
at 100% while the i386 build of IE 7 only hit the machine lightly.
Overall both browser windows appeared to cause a memory leak as the
system required a restart to bring memory usage down to normal levels
again.

Sean

References:
- Flaw in Firefox 2.0 RC2
  - From: Mike

Prev by Date: ATutor 1.5.3.2=> Remote File Include Vulnerability
Next by Date: [Xss] IN SMF 1.1 RC2
Previous by thread: Re: Flaw in Firefox 2.0 RC2
Next by thread: [security bulletin] HPSBUX02155 SSRT061235 rev.2 HP-UX CIFS Server (Samba) Local Unauthorized Access, Elevated Privileges
Index(es):
- Date
- Thread