Re: New Flaw in Firefox 2.0: DoS and possible remote code execution

To: xxxx@xxxxxxxxx
Subject: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
From: Josh Bressers <josh@xxxxxxxxx>
Date: Tue, 31 Oct 2006 13:41:57 -0500
Cc: bugtraq@xxxxxxxxxxxxxxxxx
Comments: In-reply-to xxxx@xxxxxxxxx message dated "31 Oct 2006 09:24:53 +0000."
In-reply-to: <20061031092453.17592.qmail@xxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20061031092453.17592.qmail@xxxxxxxxxxxxxxxxx>
Sender: josh@xxxxxxxxx

> New Flaw in Firefox 2.0: DoS and possible remote code execution
> 
> PoC here: http://werterxyz.altervista.org/Firefox2Range.htm
> 

This looks like a NULL pointer dereference in my debugger.  Do you have
evidence to call this remote code execution?

-- 
    JB

References:
- New Flaw in Firefox 2.0: DoS and possible remote code execution
  - From: xxxx

Prev by Date: Authentication bypass in BytesFall Explorer
Next by Date: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
Previous by thread: New Flaw in Firefox 2.0: DoS and possible remote code execution
Next by thread: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
Index(es):
- Date
- Thread