On Wed, 31 May 2006, Josh Zlatin-Amishav wrote:

> Can you give us some more details, like versions and platforms affected? I
> was unable to recreate this flaw using firefox 1.5.dfsg+1.5.0 on Debian
> unstable.

The word-wrapping of his mail client broke the exploit. If you clean that
up by only putting line-breaks between tags, it seems to work. Try:

http://static.die.net/firefox-marquee-dos/

This breaks Firefox/1.5.0.3 on Ubuntu 5.0.4 and WinXP, and Firefox/1.5.0.2
on Ubuntu 5.1.0. The browser freezes and on Linux the window stops
repainting.

-- Aaron

[ reply ]