Firefox crashes a lot
Scott
spbz at cox.net
Fri Jun 9 14:36:30 MST 2006
KevinO wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Scott wrote:
>
>> There is a known exploit available that will crash Firefox 1.5.
>>
> It appears to be a bug, and not an exploit. It made my browser hang, but not
> close completely.
>
> Packetstorm calls it a DOS proof of concept, which is a completely different
> animal than an exploit.
>
>
The code that is posted exploits the vulnerability, it is thus an exploit.
>> I have
>> tested it on several of my own systems. I found it up on
>> packetstormsecurity.org the other day, and here is the link:
>>
>> http://packetstormsecurity.org/0606-exploits/moz1504.txt
>>
>> So probably there are people embedding this into their sites either on
>> purpose or through plain coding coincidence.
>>
>>
> I doubt it. This one really isn't worth the bother. There are too many other ways
> to intentionally hang a web browser, and nothing to be gained unless you could
> inject some shell code with it.
>
>
The only thing gained would be to keep people from browsing the web.
> Let me know when you find it "out in the wild."
>
>
No problem.
> Cheers,
> - --
> KevinO
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFEiegCI3MJ/OwKti0RApylAJ9qBZuo8Ljd1R+W1amZWeTCg895XwCfRWe+
> 46bLjFe8s+/pZCRww47nugA=
> =C+YV
> -----END PGP SIGNATURE-----
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>
>
More information about the PLUG-discuss
mailing list