BugTraq
Netscape and Opera crash via java Mar 28 2003 03:05PM
Marc Schoenefeld (schonef uni-muenster de) (2 replies)
Re: Netscape and Opera crash via java Mar 28 2003 07:35PM
Mischa Krilov (mischa irev2 com) (1 replies)
RE: Netscape and Opera crash via java Apr 02 2003 12:53PM
Zelena Endre (ezelena lme linux hu) (1 replies)
RE: Netscape and Opera crash via java Apr 04 2003 02:32AM
Richard H. Cotterell (seec mail retina ar) (1 replies)
Re: Netscape and Opera crash via java Apr 09 2003 11:36PM
Dan Harkless (bugtraq harkless org)
Re: Netscape and Opera crash via java Mar 28 2003 07:04PM
Wayne D. Hoxsie Jr. (wayne hoxnet com)
On Fri, 28 Mar 2003, Marc Schoenefeld wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
>
> executing
>
> <scr1pt language="Javascript">
> t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
> </scr1pt>
>
> crashes Netscape 7.02 and Opera 7 on Windows XP.
> The active JVM in both tested browsers is Java 1.4.1_02 from Sun.
>
> This liveconnect (javascript-2-java-communication) stuff seems
> to be still very dangerous.
>
> Sincerely
> Marc Schoenefeld

I tested it on the two versions of linux/mozilla I have immediately
available:

Crashes Mozilla 1.2a
(Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2a) Gecko/20020910)

Does not crash Mozilla 1.0
(Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.0) Gecko/20020605)

--
Wayne D. Hoxsie Jr.
wayne (at) hoxnet (dot) com [email concealed]
http://www.hoxnet.com
PGP Key ID 138BCEE1

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus