SecurityFocus

Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) May 26 2009 06:13PM
Thierry Zoller (Thierry Zoller lu) (1 replies)

Re: Addendum : [TZO-26-2009] Firefox (all?) Denial of Servicethrough unclamped loop (SVG) May 27 2009 03:56PM
Jim Parkhurst (JPARKHUR dot state tx us) (2 replies)

If I understand the process, saving the text at [IV. Proof of concept] (following the "~~~..." to an .XHTML file, and launch the file using Firefox, I should lose functionality ("Browser doesn't respond any longer to any user input, all tabs are no longer accessible, your work if any (hail to the web 2.0) might be lost.")

Using FF2.0.0.20 and the file does not result in loss of use. All tabs are functional. All JAVA links continue function. Same result for naming the POC file to .HTML, .HTM.

>>> Thierry Zoller <Thierry (at) Zoller (dot) lu [email concealed]> 05/26/2009 13:13 >>>

For those that failed to reproduce, try naming the POC file with an XHTML
extension.

[ reply ]

Re[2]: Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) May 27 2009 06:59PM
Vladimir '3APA3A' Dubrovin (3APA3A SECURITY NNOV RU)

Re[2]: [Full-disclosure] Addendum : [TZO-26-2009] Firefox (all?) Denial of Service through unclamped loop (SVG) May 27 2009 06:38PM
Thierry Zoller (Thierry Zoller lu)