Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Simple DoS for Firefox 1.5
Peter Laborge, 2005-12-07
Comments Mode:
Simple DoS for Firefox 1.5 2005-12-07
Anonymous (1 replies)
I would be sure to check task manager a bit more often.......

[ more ]  [ reply ]
Re: Simple DoS for Firefox 1.5 2005-12-08
Anonymous
Apparently there is a POC out on this hole!...

[ more ]  [ reply ]
Simple DoS for Firefox 1.5 2005-12-08
Anonymous
It was sure to happen. Most informed users abandoned MS IE because the the vulnerabilities. Now with a larger user base, Firefox became a larger target, which alone can be a reason for this vulnerability.

Firefox is still, and always will be, a far more superior and secure browser to use.

I...

[ more ]  [ reply ]
Simple DoS for Firefox 1.5 2005-12-08
Anonymous (1 replies)
Not only Firefox is affected. I did some tests and got the following results:

* Firefox (1.5/Linux) - Freezes on the next startup.

* Mozilla (1.7.12/Linux) - Freezes on the next startup.

* Konqueror (3.3.2) - Slows down the whole system during script-execution, offers option to kill the scrip...

[ more ]  [ reply ]
Add: Simple DoS for Firefox 1.0.7(SAME) 2005-12-09
Anonymous
* Firefox (1.0.7/Linux) - Freezes on the next startup....

[ more ]  [ reply ]
Simple DoS for Firefox 1.5 2005-12-08
Anonymous
FYI... http://isc.sans.org/diary.php?storyid=920

Last Updated: 2005-12-08 02:24:41 UTC

"...Packetstorm Security has released proof of concept code that causes a buffer overflow and denial of service on the Firefox browser. Long and short of it is, history.dat stores various pieces of information o...

[ more ]  [ reply ]
Simple DoS for Firefox 1.5 2005-12-08
Anonymous (1 replies)
It should also be pointed out that if one keeps a 0 day history, this does NOT work....

[ more ]  [ reply ]
Re: Simple DoS for Firefox 1.5 2005-12-08
qwertysifu
This is not a serious problem. I have emailed the author of the exploit code and he confirms that there is no crash. Merely a delay in opening firefox.

https://bugzilla.mozilla.org/show_bug.cgi?id=319004

-----

qwertysifu (aka "keyboard master")...

[ more ]  [ reply ]
Simple DoS for Firefox 1.5 2005-12-08
Matthew Murphy (1 replies)
Contrary to the PacketStorm article's reporting, there is NOT a vulnerability in Firefox. The proof-of-concept code that is available only causes a brief startup delay, that is easily attributed to Firefox loading the (larger) history.dat file.

Users are not at any significant risk as a result o...

[ more ]  [ reply ]
Re: Simple DoS for Firefox 1.5 2005-12-11
Anonymous
I concur, on my P4 3.0ghz XP SP2 with Firefox 1.5 it caused about a 30-40 second delay on startup of firefox, subsequent starts of firefox are fine.

In addition as a workaround users can choose to have firefox to prompt them to clear private data when firefox is closed by going to "tools->options...

[ more ]  [ reply ]
Simple DoS for Firefox 1.5 2006-01-03
Anonymous
The link to Packet Storm just came up 404....

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus